Eclypse-Based Centralized Credential Authentication - Distech Controls ECLYPSE APEX User Manual

ECLYPSE-Based Centralized Credential Authentication

The credential database is centralized in an ECLYPSE controller that is configured as a RADIUS
server, to authenticate login requests made directly to it, and by other subscribed ECLYPSE con-
trollers. This architecture is ideal when you are not using EC-Net on your network.
EC-Net cannot subscribe to a remote RADIUS server. Due to this, you will have to add user credentials to both the
ECLYPSE RADIUS server and to the EC-Net station. For this reason, if you are using EC-Net on your network, it is
best to centralize credential authentication by using this EC-Net station as a RADIUS server. See
EC-gfxProgram
1
EC-Net
A
Optional
Figure 32: ECLYPSE-Based Centralized Credential Authentication
This authentication method has the following components.
Component Description
This is the login credential used by an EC- gfx Program user to connect to the EC-Net station. This
Login Credential 1
credential is managed in the EC-Net User Service.
This is the login credential used by an EC- gfx Program user to connect to ECLYPSE controller A. This
Login Credential 2
credential is managed in controller's A
This is the login credential used by the EC-Net station's RestService to connect to any ECLYPSE
controller. To program an ECLYPSE controller with EC- gfx Program through EC-Net, the RestService
Login Credential 3 must be configured on the EC-Net station with a login credential to all ECLYPSE controllers. This
credential is managed in this ECLYPSE controller A's
database.
This is the EC-Net station UserService credential database. This credential database is independent
Credential Database A
of all other credential databases.
This is the ECLYPSE controller A's RADIUS Server credential database. If EC- gfx Program users are
to connect to this controller through the EC-Net station, this credential database must have the
RADIUS Server A
credentials for EC-Net station's RestService. This credential database must also have the credentials
Credential Database
for each user that will login to any ECLYPSE controller (for example, administrators, direct
connection EC- gfx Program users, ENVYSION users, etc.). See
This is the ECLYPSE controller B's cached credential database. If the connection to ECLYPSE
Credential Database controller A's RADIUS Server is lost, users that have previously authenticated themselves with the
Cache B ECLYPSE controller A's RADIUS Server credential database on a given controller will still be able to
login to those controllers as their credentials are locally cached.
ECLYPSE APEX
ECLYPSE
Controller A
3
RADIUS A
User Management
Supported RADIUS Server Architectures
2
ECLYPSE
Controller B
3
Cache B
Key:
RADIUS Server
Credential Database
RADIUS
Cached Credential
Database
Cache
credential database.
User Management RADIUS server credential
User Management.
User Management.
2
45