AD Authentication

Identity and Access Management is an important part of network and data security for any organization. It helps you ensure compliance with policies, password management and acts as a means to administer access control to users.

The AD Authentication feature in OpManager helps you with just this. It allows you to authenticate users from within OpManager without using an external third party identity management tool. It allows you to grant / revoke access & security restrictions to users and also allows you to provide role based access control for accessing OpManager within your organization.

You can make Active Directory's password policy work for you if you have a Windows domain. Users login to OpManager using their domain login name and password. This will greatly minimize the risk of making others using your password to access the OpManager Web interface, thereby not just improving the security but also making it easier for users to login/create accounts. You can define a scope for users (groups, remote offices or all users), thereby restricting their access based on their roles.

With the increase in software applications, each with their own authentication and password complexity levels, this feature also saves you the trouble of having to remember way too many passwords.

Add an AD Domain

You can create Domains in OpManager and users manually in OpManager with the AD Authentication and User Management features.

To add a domain:

1. Go to SettingsBasic SettingsUser ManagementAD AuthenticationAdd.

 

ad1

ad2

 

2. Enter the Domain Name.

3. Enter the Domain Controller name.

4. Auto Login* is disabled by default.

5. Save the Settings.

6. Once the domain is added, you can manually add users in the Users tab.

 

ad2

 

Configure Auto-login

The auto-login feature allows you to add all/individual users or selected groups to any domain, and assign user permissions to them.

1. Select Add/Edit under Actions for the domain you want to configure.

 

ad3

 

2. Select the Enable Auto Login check box.
By enabling auto-login, the scope defined for the selected domain will be auto-assigned to users logging-in for the first time. If Auto-login is not enabled, then the users must be added manually.

3. Configuring Auto-login for

  • All users
    To enable Auto-login for all users, select All Users under Users. The auto login will be enabled to all the users logging into that domain.
  • Selected groups
    To enable Auto-login for selected groups, select Selected groups under Users and type the names of the groups. The auto login will be enabled to the groups you specify.

4. Once you enable Auto-login, select the Users and User Permissions for the domain, edit the Time zone if required, and click Next.

5. To configure Scope,

Monitor - You can provide this user access to either All Devices, or only Selected Business Views. If All Devices is selected, the user will have access to all the devices of NetFlow, NCM, and Firewall. If Selected Business Views is selected, you can give the access to all business views with Select All option and business views without title with Untitled option.

 

ad6

 

6. Save the settings.

 

Edit Domain Settings

Once you create a domain and assign users, you can edit the configurations as required any time. You can add or delete users/groups, edit the user permissions, and also edit the scope settings.

To Edit/Delete groups :

1. Select Edit under Actions for the domain you want to edit.

 

ad3

 

2. Enable/Disable Auto-login, select the Users and User Permissions for the domain, edit the Time zone if required, and click Next.

 

ad4

 

3. To edit a particular user/group in a domain, select Edit under Actions for the domain you want to edit.

  • You can delete or add groups from the Selected Groups, by removing/typing the names of the required groups
  • You can also select enable the settings to all users by checking All Users.

 

ad4

 

4. User Permissions for the groups can be edited by selecting either Read Only (Operator User) or Full Control (Administrator User).

5. To configure Scope,

Monitor - You can provide this user access to either All Devices, or only Selected Business Views. If All Devices is selected, the user will have access to all the devices of NetFlow, NCM, and Firewall. If Selected Business Views is selected, you can give the access to all business views with Select All option and business views without title with Untitled option.

6. Save the settings.