Authentication

The Authentication page is only accessible to a user with administrative permissions. It allows you to set the session timeout, define the authentication method, and enable guest logins.

Getting There: In the Navigation Panel, click Authentication under Settings. If the menu is hidden, click .

You can do the following:

To complete the above tasks:

1. In the Navigation Panel, click Authentication under Settings. If the menu is hidden, click .

2. Enter the Session Timeout in minutes.

   NOTE: If the timeout limit set here is greater than what a user sets for the auto-refresh intervals for dashboard widgets or in their preferences (for items such Automate Activity, Schedule Activity, or the Status Center), it will prevent the user's session from timing out if they are on one of those pages.

3. Click in the authentication method field and select LDAP, IBM i, Automate, or Webdocs for i.

   If you chose LDAP:

   1. Enter the name or address of the LDAP Host server.

      NOTE:

      • These settings are specific to the Insite module, and do not pertain to Multi-Factor Authentication's LDAP settings configured on Access Authenticator's LDAP Settings page.

      • LDAP authentication can be used with Active Directory.

      
      

   2. Enter the LDAP Port used by the LDAP server.

   3. Switch Use SSL with LDAP to On if a secure sockets layer (SSL) is used with your LDAP server. You must first import the root certificate from the LDAP Host.

      To import the root certificate from the LDAP Host:

      1. Get the CA certificate from the LDAP host you want to connect to and move it to your Insite machine file system.
      2. Import the certificate into javas cacert.
         • Run (Windows)

           keytool -import -alias Server Alias -file Certificate Path -keystore Keystore Path

           EXAMPLE:
           C:\Program Files (x86)\Help Systems\HelpSystems Insite\jvm\bin\keytool -import -file c:\PATHTOCERT\insitecert.cert -keystore "C:\Program Files (x86)\Help Systems\HelpSystems Insite\jvm\lib\security\cacerts"
         • Run (Linux)
           EXAMPLE:
           /opt/insite/jvm/bin/keytool -import -file /PATHTOCERT.insitecert.cert -keystore "/opt/insite/jvm/lib/security/cacerts"

      3. Enter the keystore password, "changeit" by default.

         NOTE: The default password for cacerts is “changeit”. You should consider changing this for security reasons.

      4. Type yes and press Enter.

      5. Restart the Insite Server service.

   4. Enter the name of your LDAP Administrator. This administrator must be able to read the LDAP tree.

      NOTE: Distinguished Name format is acceptable. For more on Distinguished Names, go to the Microsoft Developer Network website.

   5. Enter the Administrator Password (and Confirm Password) for the administrator you entered above.

   6. Enter the Default Context for the LDAP server. This is the location to search for users in Distinguished Name format.

   7. Enter the User ID Field Name for the LDAP server. This is the Attribute Name to search in for the username.

   8. Enter the LDAP Field to Match. This is the value that matches the "samaccountname" listed for the user on the LDAP server.

   9. Click Validate LDAP Connection to test the information you entered above.

   If you chose IBM i:

   1. Enter the name or Address of the IBM i server you want to use for authentication.

      NOTE: This does not have to be one of the IBM i systems that you are connecting Insite to.

      

   2. Enter an Alias for the server you specified above.

      NOTE: The alias you enter here is displayed on the Log In page as the server that is providing authentication.

   3. Enter the Port the server uses.

4. To enable guest logins and define the guest profile:

   1. Click On to Allow Guest Login. Click Off to disable it.

      

   2. Enter the Guest User Name. The default is 'Guest'.

   3. Enter the Guest Password. Enter it again to confirm it. The default is 'guest'.

5. Click Save.

Auto Login

If authentication has been successfully set up on your Insite server, you can use the Auto Login feature to provide access to users with non-interactive computers. To use Auto Login:

1. Identify the user name and password you would like to use for this feature. You can use the guest login or specify a particular user.
   
   NOTE: Use caution when selecting the user. Ensure that the user name only has authority to the parts of Insite you would like. Use Roles to set authority.
2. Identify the route to the specific Insite page for which you would like to provide access. Everything after the # in your Insite URL is considered the route. The route is bolded in the example below.
   
   EXAMPLE:
   http://xx.xx.xx.xx:3030/HelpSystems/#HelpSystems/AdvDashboard/2
3. Provide the link to those who need access. The link format is as follows:
   

   http://Insite IP Address:port/HelpSystems/#Login/{user name}/{password}/{route}

   EXAMPLE:
   http://xx.xx.xx.xx:3030/HelpSystems/#Login/Guest/GuestPswd/HelpSystems/AdvDashboard/2