Synching windows user with EA user

[andykennelly]

As part of my reading around Sparx security/user set up etc. I understand it is possible to import users from an Activer Directory group. This is good news, as it will save me (the administrator) from creating dozens of EA users manually. However, what I'm less clear about is whether the EA log in can authenticae against the logged in windows user , i.e. :-
1. The administrator creates Fred as an EA user with user name 'Fred' (using the AD group import function, maybe).
2. Fred logs into windows with user id and password of 'Fred'/'password1'.
3. Fred then fires up an EA project/model that is security enabled.
Now, is there any way for EA to recognize that the current windows user 'Fred' matches an EA user 'Fred' and, therefore, logs him in automatically (without him being presented with an EA log in box)?
OR .... if it's not possible to be so seamless, might the EA log in box be presented into which 'Fred' is entered thus enabling EA to recognize 'Fred' is already windows-authenticated such that no EA password is required?

[Helmut Ortmann]

Hi,

you can use the windows login. In such a case the password window comes. You only have to enter the Windows User ID and click on ok.

That's only one click on "Accept Windows Authentication" in Security User.

Keep in mind that:
- User information aren't encrypted
- With the right for using EA SQL all the data are visible (for insider), not changeable

Kind regards,

Helmut

[andykennelly]

Helmut -

Thanks for your reply. So, in Security/Manage Users I will need to set up a new user with the EA user id the same as the windows id. Then I will need to click on 'Accept windows authentication'. After that, when the user opens the model they will have to enter their EA user id (which will be the same as their windows id, of course), but the password will be picked up from windows? Have I got that right?

[Helmut Ortmann]

Hi,

you've got it right.

EA remembers the user id. Therefor the user usually has to click on the ok button or just enter.

That's it.

Kind regards,

Helmut

[qwerty]

Almost. After turning on security EA will add an admin account. You need to log on to that and then "Accept Windoze Authentication" and import windows users. Now each imported user can log into EA having his security settings (you need to setup first, of course). Further you can add additional EA users (mainly for admin and r/o access) with separate passwords.

q.

[Robert Sheridan]

If the users have the windows domain in front of their login name (e.g. TheDomain\rsheridan) and 'Accept Windows Authentication' is checked then they do not need to have a password set up in EA.

[Helmut Ortmann]

Hello,

after a lot of try and error I think I understand how to do it and the pitfall.

q. wrote
Almost. After turning on security EA will add an admin account. You need to log on to that and then "Accept Windoze Authentication" and import windows users. Now each imported user can log into EA having his security settings (you need to setup first, of course). Further you can add additional EA users (mainly for admin and r/o access) with separate passwords.

You have to import the not in EA existing users. Just importing with updating an existent EA user don't work! Delete the user from EA and then import.

That's the pitfall I encountered. I entered the user and later I imported them from windows. Sadly, that doesn't work.

Kind regards,

Helmut