User Login Options by Authentication Method and Server Authentication Scope

The sections below provide two views of user login authentication:

• A flowchart that highlights authentication checks carried out by VOSS Automate for the authentication method set as Automatic.

• Two matrices showing successful user login in accordance with specific server and user configurations. The matrices are divided according to whether the user uses an SSO login URL.

Authentication Flow

The flowchart below shows the authentication process in VOSS Automate when a user logs in. Specifically, the chart shows the system process where the authentication method on VOSS Automate is set to be Automatic.

Settings and conditions to check include:

• User login and settings (user and authentication)

• Servers (SSO, LDAP) set up and their settings (scope and authentication)

• System settings (global authentication method)

Authentication Matrix

This section provides details on whether users can log in on VOSS Automate (Y or N), based on:

1. User authentication method (Auth Method): either Local, LDAP, SSO, or Automatic

   See:

   • User Authentication

   • Add an Admin User

2. User sync type: either all users, or LDAP synced

   See:

   • LDAP Server

3. Server authentication scope: one of the following:

   • Current and below

   • Current only

   See:

   • LDAP Server

   • SSO Identity Provider

Note

If an IDP server is in scope and authentication method is set to LDAP, authentication is attempted against LDAP on login.

If the authentication method is set to Automatic, IDP(SSO) authentication takes precedence.

IDP(SSO) - User on IDP Server, and SSO Login URL Used

User auth method	Server authentication scope (hierarchy):
	Current hierarchy and below		Current hierarchy only
	User sync type - who can authenticate:
	all users	synced users	all users	synced users
Local	N	Y	Y (If user not at server node)	Y
LDAP	N	Y	Y (If user at server node)	Y (If user at server node)
SSO	Y	Y (If LDAP synced user)	Y (If user at server node)	Y (If user LDAP synced at server node)
Automatic	Y	Y (If LDAP synced user)	Y (If user at server node)	Y (If user LDAP synced at server node)

No IDP(SSO) - LDAP Configured and Enabled for Authentication

User auth method	Server authentication scope (hierarchy):
	Current hierarchy and below		Current hierarchy only
	User sync type - who can authenticate:
	all users	synced users	all users	synced users
Local	N	Y	Y (If user not at server node)	Y
LDAP	Y	Y	Y (If user at server node)	Y (If user at server node)
SSO	N	N	N	N
Automatic	Y (if synced user)	Y (if synced user)	Y (If user synced at server node)	Y (If user synced at server node)