Enportal/5.4/admin/user administration/enPortal provisioning - Revision history

imported>Jason.nicholls: /* Tutorial */

2014-07-17T06:47:15Z

Tutorial

← Older revision		Revision as of 06:47, 17 July 2014
Line 295:		Line 295:
	== Tutorial ==		== Tutorial ==

	A tutorial walk-through of the the basic enPortal provisioning screens is available at [[~~Provisioning_Quick_Start~~\|Provisioning Quick Start]].		A tutorial walk-through of the the basic enPortal provisioning screens is available at [[enportal/5.4/admin/user_administration/enPortal_provisioning_quick_start\|Provisioning Quick Start]].


	== LDAP Provisioning ==		== LDAP Provisioning ==

imported>David.moore: /* Provisioning Web Service */

2014-07-16T20:41:28Z

Provisioning Web Service

← Older revision		Revision as of 20:41, 16 July 2014
Line 324:		Line 324:
	Examples:		Examples:

	# assign <tt>/Admin/~~Quick Start~~</tt> (part of the standard enPortal content) to the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=add&role=/dev&content=/Admin/~~Quick+Start~~ /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=add&role=/dev&content=/Admin/~~Quick+Start~~]</tt>		# assign <tt>/Admin/Advanced</tt> (part of the standard enPortal content) to the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=add&role=/dev&content=/Admin/Advanced /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=add&role=/dev&content=/Admin/Advanced]</tt>
	# remove <tt>/Admin/~~Quick Start~~</tt> from the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=delete&role=/dev&content=/Admin/~~Quick+Start~~ /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=delete&role=/dev&content=/Admin/~~Quick+Start~~]</tt>		# remove <tt>/Admin/Advanced</tt> from the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=delete&role=/dev&content=/Admin/Advanced /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=delete&role=/dev&content=/Admin/Advanced]</tt>
	# clear all content from the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=clear&role=/dev /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=clear&role=/dev]</tt>		# clear all content from the <tt>dev</tt> role:<br><tt>[http://localhost:8080/enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=clear&role=/dev /enportal/servlet/pd/vdir/home/role/portalAdministration/Menu/Admin/Provisioning/Manage+Roles?requestType=update&operation=clear&role=/dev]</tt>

imported>David.moore: /* Assigning Roles to Users */

2014-03-28T19:42:21Z

Assigning Roles to Users

← Older revision		Revision as of 19:42, 28 March 2014
Line 274:		Line 274:
	{{Tip\|The above procedure selects a Role and assigns a User or Domain to that Role. You can also select a User or Domain by mousing over the '''Provisioning''' tab and selecting '''Domains & Users''', and assign the Role to that Domain or User. Either procedure creates the same result.}}		{{Tip\|The above procedure selects a Role and assigns a User or Domain to that Role. You can also select a User or Domain by mousing over the '''Provisioning''' tab and selecting '''Domains & Users''', and assign the Role to that Domain or User. Either procedure creates the same result.}}

	{{Note\|To edit a domain or user that is assigned to a role, either double-click the domain or user name for which you wish to make changes, or select the domain/user entry in the list, click the small arrow next to '''Edit''', and choose either ''Edit Domain'' or ''Edit User''.}}		{{Note\|To edit a domain or user that is assigned to a role, either double-click the domain or user name for which you wish to make changes, or select the domain/user entry in the list, click the small arrow next to '''Edit''', and choose either ''Edit Domain'' or ''Edit User''. Similar steps can be taken on the '''LAF''' sub-tab to edit assigned Look-and-Feel settings.}}

	=== Direct vs. Inherited Role Assignments ===		=== Direct vs. Inherited Role Assignments ===

imported>David.moore: /* Assigning Roles to Users */

2014-03-28T19:38:16Z

Assigning Roles to Users

← Older revision		Revision as of 19:38, 28 March 2014
Line 273:		Line 273:

	{{Tip\|The above procedure selects a Role and assigns a User or Domain to that Role. You can also select a User or Domain by mousing over the '''Provisioning''' tab and selecting '''Domains & Users''', and assign the Role to that Domain or User. Either procedure creates the same result.}}		{{Tip\|The above procedure selects a Role and assigns a User or Domain to that Role. You can also select a User or Domain by mousing over the '''Provisioning''' tab and selecting '''Domains & Users''', and assign the Role to that Domain or User. Either procedure creates the same result.}}

			{{Note\|To edit a domain or user that is assigned to a role, either double-click the domain or user name for which you wish to make changes, or select the domain/user entry in the list, click the small arrow next to '''Edit''', and choose either ''Edit Domain'' or ''Edit User''.}}

	=== Direct vs. Inherited Role Assignments ===		=== Direct vs. Inherited Role Assignments ===

imported>David.moore: /* Users */

2014-03-28T19:32:17Z

Users

← Older revision		Revision as of 19:32, 28 March 2014
Line 196:		Line 196:
	## <b>Password</b> - As an administrator, you can reset a User's password.		## <b>Password</b> - As an administrator, you can reset a User's password.
	## <b>Lock Account</b> - If you would like to lock the User’s account, select the <b>Lock Account</b> check box and, optionally, enter a reason in the <b>Lock Reason</b> field.		## <b>Lock Account</b> - If you would like to lock the User’s account, select the <b>Lock Account</b> check box and, optionally, enter a reason in the <b>Lock Reason</b> field.
	# Click the <b>Roles</b> sub-tab to assign or unassign Roles to the User. Note: it is typically recommended that you assign Roles to Domains, and not to individual Users.		# Click the <b>Roles</b> sub-tab to assign or unassign Roles to the User. Note: it is typically recommended that you assign Roles to Domains, and not to individual Users. For any role listed in the '''Roles''' sub-tab, the role can be edited either by double-clicking the role or by selecting the role in the list and clicking the '''Edit''' button.
	# Click the <b>LAF</b> sub-tab to assign or un-assign a Look and Feel to the User. Note: it is typically recommended that you assign LAFs to Domains or Roles, and not to individual Users.		# Click the <b>LAF</b> sub-tab to assign or un-assign a Look and Feel to the User. Note: it is typically recommended that you assign LAFs to Domains or Roles, and not to individual Users. To edit an LAF, either double-click the LAF or select the LAF in the list, click the small arrow next to '''Action''', and choose ''Edit'' (the other option in the '''Action''' menu is ''Preview'').

imported>David.moore: /* Domains */

2014-03-28T19:16:16Z

Domains

← Older revision		Revision as of 19:16, 28 March 2014
Line 137:		Line 137:
	### <b>Dedicated to other Domains</b> - The number of sessions currently dedicated to all other Domains. This number cannot be modified.		### <b>Dedicated to other Domains</b> - The number of sessions currently dedicated to all other Domains. This number cannot be modified.
	### <b>Licensed</b> - The total number of sessions that can be allocated, as permitted by the system license file. A value of -1 indicates unlimited licenses. The number of sessions you allocate for this Domain plus the number already allocated to other Domains should not exceed the number in the Licensed field.		### <b>Licensed</b> - The total number of sessions that can be allocated, as permitted by the system license file. A value of -1 indicates unlimited licenses. The number of sessions you allocate for this Domain plus the number already allocated to other Domains should not exceed the number in the Licensed field.
	# Click the <b>Roles</b> sub-tab to assign or unassign Roles to the Domain.		# Click the <b>Roles</b> sub-tab to assign or unassign Roles to the Domain. For any role listed in the <b>Roles</b> sub-tab, the role can be edited either by double-clicking the role or by selecting the role in the list and clicking the '''Edit''' button.
	# Click the <b>LAF</b> sub-tab to assign or un-assign a Look and Feel to the Domain.		# Click the <b>LAF</b> sub-tab to assign or un-assign a Look and Feel to the Domain. To edit an LAF, either double-click the LAF or select the LAF in the list, click the small arrow next to '''Action''', and choose ''Edit'' (the other option in the '''Action''' menu is ''Preview'').

imported>Mylene.stolpe at 00:59, 7 February 2014

2014-02-07T00:59:28Z

← Older revision		Revision as of 00:59, 7 February 2014
Line 5:		Line 5:
	== Basic Provisioning Concepts - Understanding the User Organization ==		== Basic Provisioning Concepts - Understanding the User Organization ==

	Provisioning is how you create Users and Roles in enPortal, and then provide the appropriate targeted information to them. section provides guidelines on what to consider when planning the organization of the AppBoard/enPortal system.		Provisioning is how you create Users and Roles in enPortal, and then provide the appropriate targeted information to them. This section provides guidelines on what to consider when planning the organization of the AppBoard/enPortal system.

imported>Mylene.stolpe at 19:50, 6 February 2014

2014-02-06T19:50:59Z

← Older revision		Revision as of 19:50, 6 February 2014
Line 167:		Line 167:
	# Confirm that the correct policy is applied by changing a test user's password.		# Confirm that the correct policy is applied by changing a test user's password.

	{{Note\|In order to change password for users that are managed by ldap, you must specified a [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Managed_Domains\|Pluggable Authenticator]] in the domains managed by this ldap and with [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Repositories\|Repository URL]] starts with <tt>ldaps://</tt> and <tt>secured port #</tt> (default 636).<br/><br/>Additionally some ldaps like MS Active Directory and OpenLDAP requires ldap server's SSL certificate to be imported into java cert library running portal. Please read this [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#LDAP_With_SSL\|section]] on how to set it up. Additional example for importing MS Active Directory SSL certificate into java cert lib can be found [https://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory here].<br/><br/>Currently portal is delivered with two authenticators that allowed for ldap user password changes: '''Microsoft Active Directory''' and '''OpenDS'''.}}		{{Note\|In order to change password for users that are managed by ldap, you must specified a [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Managed_Domains\|Pluggable Authenticator]] in the domains managed by this ldap and with [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Repositories\|Repository URL]] starts with <tt>ldaps://</tt> and <tt>secured port #</tt> (default 636).<br/><br/>Additionally some ldaps like MS Active Directory and OpenLDAP requires ldap server's SSL certificate to be imported into java cert library running portal. Please read this [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#LDAP_With_SSL\|LDAP with SSL]] section of the [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration\|LDAP Configuration]] page on how to set it up. Additional example for importing MS Active Directory SSL certificate into java cert lib can be found [https://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory here].<br/><br/>Currently portal is delivered with two authenticators that allowed for ldap user password changes: '''Microsoft Active Directory''' and '''OpenDS'''.}}

	=== Users ===		=== Users ===

imported>Mylene.stolpe at 19:46, 6 February 2014

2014-02-06T19:46:23Z

← Older revision		Revision as of 19:46, 6 February 2014
Line 240:		Line 240:


	Once you have created a Role, you must assign content to the Role. This will provide information to any User who logs in to enPortal under that Role. To create content please follow the instruction specified in this [[~~Creating_Content~~\|~~page~~]].		Once you have created a Role, you must assign content to the Role. This will provide information to any User who logs in to enPortal under that Role. To create content please follow the instruction specified in this [[enportal/5.4/admin/user_administration/content_creation\|Content Creation]] page.

imported>Mylene.stolpe at 19:43, 6 February 2014

2014-02-06T19:43:45Z

← Older revision		Revision as of 19:43, 6 February 2014
Line 167:		Line 167:
	# Confirm that the correct policy is applied by changing a test user's password.		# Confirm that the correct policy is applied by changing a test user's password.

	{{Note\|In order to change password for users that are managed by ldap, you must specified a [[~~EnPortal_LDAP_Configuration~~#Configuring_LDAP_Managed_Domains\|Pluggable Authenticator]] in the domains managed by this ldap and with [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Repositories\|Repository URL]] starts with <tt>ldaps://</tt> and <tt>secured port #</tt> (default 636).<br/><br/>Additionally some ldaps like MS Active Directory and OpenLDAP requires ldap server's SSL certificate to be imported into java cert library running portal. Please read this [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#LDAP_With_SSL\|section]] on how to set it up. Additional example for importing MS Active Directory SSL certificate into java cert lib can be found [https://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory here].<br/><br/>Currently portal is delivered with two authenticators that allowed for ldap user password changes: '''Microsoft Active Directory''' and '''OpenDS'''.}}		{{Note\|In order to change password for users that are managed by ldap, you must specified a [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Managed_Domains\|Pluggable Authenticator]] in the domains managed by this ldap and with [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Repositories\|Repository URL]] starts with <tt>ldaps://</tt> and <tt>secured port #</tt> (default 636).<br/><br/>Additionally some ldaps like MS Active Directory and OpenLDAP requires ldap server's SSL certificate to be imported into java cert library running portal. Please read this [[enportal/5.4/admin/user_administration/enPortal_LDAP_configuration#LDAP_With_SSL\|section]] on how to set it up. Additional example for importing MS Active Directory SSL certificate into java cert lib can be found [https://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory here].<br/><br/>Currently portal is delivered with two authenticators that allowed for ldap user password changes: '''Microsoft Active Directory''' and '''OpenDS'''.}}

	=== Users ===		=== Users ===