Integrating Data360 Analyze with SSO or LDAP/AD enables your users to sign in with the same set of user credentials (username and password) that they use elsewhere in your business, and allows you to manage user authentication centrally.
You can configure SSO and LDAP/AD settings by clicking Settings from the Directory. See Directory user interface for more details.
Data360 Analyze supports the following user creation and authentication methods:
| Integration | Local | LDAP/AD | SSO |
|---|---|---|---|
|
Local You can create users and groups locally in Data360 Analyze. In this case, authentication occurs locally in the web application and only locally created Data360 Analyze users can access the application. |
✔ | X |
X |
|
LDAP/AD You can integrate Data360 Analyze with an external LDAP/AD source system as your primary method of external authentication. In this case, users and groups are either imported or created dynamically from their LDAP/AD user account, and user authentication occurs via the LDAP/AD server. You have the option to:
|
X | ✔ |
X |
|
SSO You can integrate Data360 Analyze with SAML2 Single Sign-On. If enabled, Single Sign-On (SSO) is the primary method of user authentication. In this case, authentication occurs externally via the SAML2 Single Sign-On web agent. If Data360 Analyze is configured to create users on demand, when a user signs in, the application creates the user if they do not already exist based on the value passed from SAML2 Single Sign-On in the SM_USER header, and assigns a default role. Alternatively, you can create users locally in Data360 Analyze, or via the API. |
X | X |
✔ |
|
SSO with LDAP/AD for user creation You can enable SAML2 Single Sign-On for user authentication and use LDAP/AD to create or import users. In this case, when users sign in to Data360 Analyze via the Gateway, users can be created on demand from their LDAP/AD account or users can be created via a manual or automated sync of the LDAP/AD account. |
X | ✔ |
✔ |
See also: