Authentication options

Webdesk basically supports the following authentication variants:

• Database-based authentication
  Webdesk database-based login; can also be used as a backup method with SSO / NTLM or for users not contained in Active Directory
• Authentication via LDAP
  LDAP server manages login information
• Authentication with SSO (NTLM)
  Login via Microsoft Internet Information Server, Apache server or automatic login based on Windows login information

Database-internal authentication

With database-internal authentication, the user name and password of the users are stored within Webdesk's own database. There is therefore no dependency on a third-party system for authentication.
With DB-internal authentication, the user must enter their user name and password in the login form when entering Webdesk. This pair is then checked against the database and, if they match, the user with the entered user name is logged in to the system.

Password management is to be seen as a subitem of authentication (DB-based authentication)

To activate DB-internal authentication as the primary or secondary authentication type, the corresponding system parameter (BeanProperty) must be set.

• Module PO > Bean Authentication
• as primary authentication method: Authentication.authenticationMode = DB
• as secondary (backup) authentication method: AuthenticaticationBackupForSSO.authenticationMode = DB

The passwords are stored in the table PoPassword, together with their validity date and a flag that indicates whether a change should be forced at the next login.