Define User Authentication

There are two methods to authenticate PMM users:

• Client Integrated Authentication (with domain controller): This is the default NTLM authentication method.
• Forms-based Authentication: This will allow the user to manually enter their windows logon or email address along with their windows password. Forms-based authentication is performed by the Gateway if NTLM is disabled and connects the Gateway to a domain controller using an LDAP connection.

Specify the User Authentication method

1. Navigate to System > PMM Settings > Authentication Settings. The Authentication Settings page is displayed.

2. In the User Authentication panel, click Click here to change these settings.

3. Select either Client Integrated Authentication or Forms-based Authentication.

   Client Integrated Authentication is performed by the Gateway connecting to a domain controller. If users are members of multiple domains, each of these domains must have a trust relationship with the selected domain controller. Otherwise, authentication will not be successful for users within the untrusted domain. Users in untrusted domain forests must use Forms-based authentication to access the PMM Portal.

4. Click Save.

   If you have selected Client Integrated Authentication, your current domain configuration is displayed in the User Authentication panel. This information includes the name of the domain that the Gateway has joined and will use for authentication. If the Gateway is not currently a member of a domain, or you wish to join a new domain, you can configure the connection using the Domain Controllers panel.

5. Apply the configuration.

If you change any configuration or policy settings, you must Apply Configuration for the new settings to take effect. You can do this either from the Changes Made panel, or System > Configuration > Apply Configuration. See Apply new configuration for more information. If you use Peer Gateways (i.e. when multiple Gateways are peered), any configuration changes from a local Gateway can then be applied to all the peers at the same time. See Configure Peer Gateways for more information.

See also...

• PMM authentication

• Configure Domain Controllers