.. _user-login-auth-method-srv-auth-scope:

User Login Options by Authentication Method and Server Authentication Scope
------------------------------------------------------------------------------

.. _20.1.1|VOSS-551:

The tables below show:

* whether a user can log in (indicated by Y or N) on VOSS-4-UC given the

  a. User's **Auth Method**
  #. User type: all users or LDAP synced
  #. The **Authentication Scope** of the server (there is a table for SSO and LDAP): 

     * Current and below
     * Current only



IDP configured. SSO (User on IDP server and SSO Login URL used)
...............................................................

.. tabularcolumns:: |p{3cm}|p{3cm}|p{3cm}|p{3cm}|p{3cm}|

+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
| User        | * Scope:Current and below | * Scope: Current and below | * Scope: Current only | * Scope: Current only     |
| Auth Method | * User Type: All          | * User Type: synced users  | * User Type: All      | * User Type: synced users |
+=============+===========================+============================+=======================+===========================+
|             |                           |                            | Y (If user            |                           |
| Local       | N                         | Y                          | not at                | Y                         |
|             |                           |                            | server                |                           |
|             |                           |                            | node)                 |                           |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
|             |                           |                            | Y (If user            | Y (If user                |
| LDAP        | N                         | Y                          | at server             | at server                 |
|             |                           |                            | node)                 | node)                     |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
|             |                           |                            | Y (If user            | Y (If user                |
| SSO         | Y                         | Y (If LDAP                 | at server             | LDAP synced               |
|             |                           | synced user)               | node)                 | at server                 |
|             |                           |                            |                       | node)                     |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
|             |                           |                            | Y (If user            | Y (If user                |
| Automatic   | Y                         | Y (If LDAP                 | at server             | LDAP synced               |
|             |                           | synced user)               | node)                 | at server                 |
|             |                           |                            |                       | node)                     |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+





LDAP configured and enabled for Authentication, no IDP(SSO)
............................................................

.. tabularcolumns:: |p{3cm}|p{3cm}|p{3cm}|p{3cm}|p{3cm}|

+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
| User        | * Scope:Current and below | * Scope: Current and below | * Scope: Current only | * Scope: Current only     |
| Auth Method | * User Type: All          | * User Type: synced users  | * User Type: All      | * User Type: synced users |
+=============+===========================+============================+=======================+===========================+
|             |                           |                            | Y (If user            |                           |
| Local       | N                         | Y                          | not at                | Y                         |
|             |                           |                            | server                |                           |
|             |                           |                            | node)                 |                           |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
|             |                           |                            | Y (If user            | Y (If user                |
| LDAP        | Y                         | Y                          | at server             | at server                 |
|             |                           |                            | node)                 | node)                     |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
| SSO         | N                         | N                          | N                     | N                         |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+
|             |                           |                            | Y (If user            | Y (If user                |
| Automatic   | Y (if synced user)        | Y (if synced               | synced at             | synced at                 |
|             |                           | user)                      | server                | server                    |
|             |                           |                            | node)                 | node)                     |
+-------------+---------------------------+----------------------------+-----------------------+---------------------------+


.. note::

   If an IDP server is in scope and authentication method is set to LDAP, authentication will be attempted against LDAP on login.
   If the authentication method is set to Automatic, IDP(SSO) authentication takes precedence.