Configuring User Authentication

By default, local users enter a password stored in SecureChange and LDAP users authenticate with the user password that is listed in the LDAP server. You can also configure users to authenticate to SecureChange with the password that is listed for the user in an alternative system, such as a RADIUS server or a CA SiteMinder single sign-on client.

You can configure the alternative authentication as the default authentication for all users, or select an alternative authentication for specific users. To do this, you must:

1. Configure the connection to the alternative authentication method: RADIUS, Single sign-on
2. If necessary, change the default authentication method for all users.
3. If necessary, set the authentication method for specific users.

If the user was not previously defined in SecureChange, the user authenticates with the default authentication method and gets roles from the Any user group. If you disable the authentication method that is selected as the default, the default changes to another configured authentication method.