Configuring Authentication

Before any of your users can log on to HelpSystems One, you must specify how to authenticate the users. You can choose to authenticate your users against a lightweight directory access protocol (LDAP) server.

1. In the Navigation Bar, click Authentication under Settings.

2. Enter the Session Timeout in minutes.

3. Click in the authentication method field and select HelpSystems One or LDAP.

   If you chose HelpSystems One

   HelpSystems One Authentication allows you to authenticate users to the HelpSystems One server itself. Use the parameters to establish criteria for the creation of users.

   

   1. Enter the Required Minimum Password Length.

   2. Enter the Required Minimum Amount of Upper Case Letters for the user password.

   3. Enter the Required Minimum Amount of Lower Case Letters for the user password.

   4. Enter the Required Minimum Amount of Numbers for the user password.

   5. Enter the Required Minimum Amount of Special Characters for the user password.

   6. Enter the Special Characters Allowed in the user password.

   If you chose LDAP:

   1. Enter the name or address of the LDAP Host server.

      NOTE:

      • These settings are specific to the HelpSystems One module, and do not pertain to Access Authenticator's LDAP settings configured on Access Authenticator's LDAP Settings page.

      • LDAP authentication can be used with Active Directory.

      
      

   2. Enter the LDAP Port used by the LDAP server.

   3. Switch Use SSL with LDAP to On if a secure sockets layer (SSL) is used with your LDAP server. You must first import the root certificate from the LDAP Host.

      To import the root certificate from the LDAP Host:

      1. Get the CA certificate from the LDAP host you want to connect to and move it to your HelpSystems One machine file system.
      2. Import the certificate into javas cacert.
         • Run (Windows)

           keytool -import -alias Server Alias -file Certificate Path -keystore Keystore Path

         • Run (Linux)
           EXAMPLE:
           /usr/bin/keytool -import -file /PATHTOCERT/ldapcert.cer -keystore "/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.292.b10-1.el8_4.x86_64/jre/lib/security/cacerts"

      3. Enter the keystore password, "changeit" by default.

         NOTE: The default password for cacerts is “changeit”. You should consider changing this for security reasons.

      4. Type yes and press Enter.

      5. Restart HelpSystems One
         1. For Windows, restart the HelpSystems One Server service.
         2. For Linux, on a command line, issue the command:
            systemctl restart hs1-iam

   4. Enter the name of your LDAP Administrator. This administrator must be able to read the LDAP tree.

      NOTE: Distinguished Name format is acceptable. For more on Distinguished Names, go to the Microsoft Developer Network website.

   5. Enter the Administrator Password (and Confirm Password) for the administrator you entered above.

   6. Enter the Default Context for the LDAP server. This is the location to search for users in Distinguished Name format.

   7. Enter the User ID Field Name for the LDAP server. This is the Attribute Name to search in for the username.

   8. Enter the LDAP Field to Match. This is the value that matches the "samaccountname" listed for the user on the LDAP server.

   9. Click Validate LDAP Connection to test the information you entered above.

Click Save.