Authentication Workflows - Revision history

IVSWikiBlue at 20:13, 1 April 2024

2024-04-01T20:13:30Z

2024-04-01T20:12:26Z

2024-04-01T15:47:32Z

2024-04-01T15:46:24Z

2024-03-29T21:18:44Z

2024-03-28T12:47:07Z

2024-03-27T21:46:17Z

2024-03-27T21:45:44Z

2024-03-27T21:42:22Z

2024-03-27T21:41:58Z

@@ Line 30: / Line 30: @@
 *VALT's SSO uses <b>Just-In-Time (JIT) Provisioning</b>.
-**<em>Users are reevaluated and assigned to groups each time they log in, based on a group membership attribute being passed.</em>
+**<em>Users are reevaluated and assigned to groups each time they log in, based on a [[Single_Sign-On_(SSO)#User_Mapping | group membership]] attribute being passed.</em>
 *If a user does <u>NOT</u> have a user mapping associated with their account, the user gets moved to "<b>Users without Group</b>" and has restricted access.
 *If a user's user mapping changes, they will be moved to the correct group upon their next SSO sign-in.

@@ Line 30: / Line 30: @@
 *VALT's SSO uses <b>Just-In-Time (JIT) Provisioning</b>.
-**<em>Users are reevaluated and assigned to groups each time they log in, based on the group membership attribute being passed.</em>
+**<em>Users are reevaluated and assigned to groups each time they log in, based on a group membership attribute being passed.</em>
 *If a user does <u>NOT</u> have a user mapping associated with their account, the user gets moved to "<b>Users without Group</b>" and has restricted access.
 *If a user's user mapping changes, they will be moved to the correct group upon their next SSO sign-in.

@@ Line 40: / Line 40: @@
 </onlyinclude>
 [[VALT SSO| &#x293A; Back to VALT SSO Main Page]]
 }}

← Older revision		Revision as of 15:46, 1 April 2024
Line 40:		Line 40:

	</onlyinclude>		</onlyinclude>
		+	[[VALT SSO\| ⤺ Back to VALT SSO Main Page]]
	}}		}}

@@ Line 15: / Line 15: @@
 Local accounts are created and assigned to groups within VALT. Local accounts can be created manually or imported from a [[Importing_Users_from_a_file|list]].
-{{img - no_click | file = auth_local.jpg}}
+{{img - resize | file = auth_local.jpg}}
 {{hr}}
@@ Line 22: / Line 22: @@
 LDAP accounts can be imported manually using an LDAP search and lookup tool within the software or imported automatically on a schedule based on group.
-{{img - no_click | file = auth_ldap.jpg}}
+{{img - resize | file = auth_ldap.jpg}}
 {{hr}}
@@ Line 37: / Line 37: @@
 {{hr - 2}}
-{{img - no_click | file = SSO Flow Chart.png}}
+{{img - resize | file = SSO Flow Chart.png}}
 </onlyinclude>
 }}

@@ Line 31: / Line 31: @@
 *VALT uses <b>Just-In-Time (JIT) Provisioning</b>.
 **<em>Users are reevaluated and assigned to groups each time they log in, based on the group membership attribute being passed.</em>
-*If a user does <u>NOT</u> have a user mapping associated with their account, user gets moved to "<b>Users without Group</b>" and has restricted access.
+*If a user does <u>NOT</u> have a user mapping associated with their account, the user gets moved to "<b>Users without Group</b>" and has restricted access.
 *If a user's user mapping changes, they will be moved to the correct group upon their next SSO sign-in.
 **<em>Correct mapping is based on the SSO mapping created in VALT and the attribute/pair value being passed from the IdP.</em>

@@ Line 30: / Line 30: @@
 *VALT uses Just-In-Time (JIT) Provisioning.
-**Users are reevaluated and assigned to groups each time they log in, based on the [[SAML Check List#User_Mapping | group membership attribute]] being passed.
+**Users are reevaluated and assigned to groups each time they log in, based on the group membership attribute being passed.
 *If a user does NOT have a user mapping associated with their account, user gets moved to "Users without Group" and has restricted access
 *If a user's user mapping changes, they will be moved to the correct group upon their next SSO sign-in