Configuring External Authentication For Groups - HPE XP7 Automation Director User Manual

Procedure
1. From the Administration tab, select Users and Permissions.
2. Select the Users folder, then select one or more users for which you want to change the
authentication method, or click Add User to create a new account.
NOTE: When creating a new account, only the User ID is required for external authentication, and
must match a user ID on the external authentication server. For a local (internal) account, both a User
ID and Password are required. When external authentication is available, new user accounts created
without a password value are automatically configured to use external authentication (for example,
LDAP is selected for you). Fill in the fields as needed, and click OK to create the user account.
If you are completing an external authentication in a multiple-domain configuration or by using realms,
specify a user ID that includes the domain name or realm name for the User ID. Example: user-
name@domain-name or realm-name.
When you log on, also specify your user ID in this format.
3. If you are selecting existing users, click Change Auth. A dialog box appears. From the drop-down list,
select the required authentication method (for example, LDAP) and click OK.
4. Review the Authentication column to verify the authentication method.
On the next logon attempt by each user, the user's logon credentials (user ID and password) are
validated by using the external authentication server.
More information
Creating a user account on page 63
Configuring external authentication for groups on page 66

Configuring external authentication for groups

You can use external authentication systems, such as LDAP (for example, Active Directory), RADIUS, or
Kerberos to authenticate XP7 Command View Advanced Edition user group members as they log on. You
can configure one or more user groups, from one or more external authentication servers.
When linking with an external authentication server, if using together with Active Directory as an external
authorization server, you can manage user permissions by using the Active Directory groups
(authorization groups) registered on the external authorization server. In this case, user permissions are
specified for each group.
Prerequisites
• The Automation Director server must be linked to an external authentication (authorization) server.
See the HPE XP7 Command View Advanced Edition Administrator Guide.
• The Automation Director server must be configured to support group authentication, which activates
the Groups folder in the UI.
• The Automation Director user group must exist on the external authentication (authorization) server. It
is recommended that the required domain and group information be acquired from the external
authentication server administrator.
66 Configuring external authentication for groups