Windows Users vs Standard Login Users
WIthin Within Continua, there are two types of users:
- Windows users. Windows users do not need to login to Continua CI as their Windows credentials and authentication are automatically passed in. Windows users are only available when Continua authentication mode is configured to either LDAP or Mixed modes. All windows users are denoted in the users list by a blue chain icon.
- Standard login users. These users are created completely within Continua CI and require the user logs in to Continua with their own unique username and password. Standard login users are only available when Continua's authentication mode is configured to either Forms or Mixed modes.
If a user is not present in the Active Directory administration group mentioned above, they will need to be created as a Continua CI user before they can access Continua's environment. When creating a Windows user, the matching Ldap LDAP Username must be selected.
User accounts can be disabled to deny a particular user access to Continua. If a user account is disabled, they will not be able to login to Continua as that user. However, if the guest account is active, they will still be able to access the Continua environment as a guest user (including all permissions that belong to the guest account). If the guest account has been disabled then a disabled user will be completely locked out of the Continua environment.
Creating a User
(Creating a standard login user)
(Creating a windows user)
The fields displayed when creating a user will depend on the current authentication mode. In LDAP or Mixed mode, the 'Ldap usernameLDAP Username' selection box is available which will allow you to link the user to an existing Windows user. If an Ldap username LDAP Username is selected, the Username and a Password fields are removed. If a standard login user is being created, the Ldap Username MUST be set to None.All displayed fields are required except for the Xmpp Id. You can also optionally choose to add the user to a group by selecting the group or groups from the "Member Of" section. NOTE: you LDAP Username MUST be left empty.
To create a standard Continua CI user, enter a username and password,
Then add the name, email and XMPP details.
Finally, allocate the user to any Continua CI groups.
To create a Windows user, type some letters in the user's name and select an LDAP Username from the dropdown.
You can then choose to automatically synchronise the name and email, or make change the name and email loaded from Active Directory. You can also change the XMPP Id. Note that the user will only be enabled, if enabled in Active Directory via Windows Administration tools.
You can also allocate the user to any Continua CI groups. NOTE: you cannot add a user to a group which is linked to an LDAP group here. Membership of LDAP groups can be managed via Windows Administration tools.
The list of available Ldap users and their group membership is automatically synchronised with Windows every 30 minutes. This process can be triggered immediately by clicking on the 'Synchronise LDAP' link.
Editing a User
(editing a standard login user)
(editing a windows user)
The edit options are the same as the options provided when creating a user. The only difference being that the password field is locked. To change a users password, click the edit icon to the right of the password field (which unlocks the password) and specify the new password.
Once a Windows user has been created, the linked Active Directory user cannot be changed.