Adding Users to SecureChange

You can configure SecureChange users and groups locally in SecureChange, or you can configure an LDAP connection and import from the LDAP directory. Group membership and user authentication for LDAP users is regularly updated from the LDAP directory.

Local and LDAP users have the same permissions and functionality, and both kinds of users can be configured to work on SecureChange at the same time. Local groups can contain LDAP users and groups as members. LDAP groups can only include LDAP users and groups because the LDAP directory manages group membership for LDAP users.

If a user logs in with a username and password that are listed in both SecureChange and in LDAP, the role permissions and group membership of the local user apply.

If the same username is associated with different passwords for SecureChange and for LDAP, the password which is used to log in determines which role permissions and group membership apply.

For an environment that has multiple LDAP servers configured, the login for LDAP servers is prioritized alphabetically by LDAP name.