Ektron CMS400.Net Reference

>>Managing Users and User Groups > Active Directory Feature > Implementing Active Directory Integration > User Authentication Only Mode

User Authentication Only Mode

In user authentication mode, the sharing between AD and Ektron CMS400.NET is limited to user logon name, domain, and password.

How Information is Transferred from Active Directory to Ektron CMS400.NET

Ektron CMS400.NET does not write to AD – it only reads from it. This results in the following changes to how username, domain, and password are handled in Ektron CMS400.NET.

Changes to user logon name, domain and password must be made in AD — you cannot update these fields in the Ektron CMS400.NET Edit User screens.

When adding a new user to Ektron CMS400.NET, you can only select AD users. If the user does not exist in AD, create the user there, and then import the user into Ektron CMS400.NET.

Which Information is Transferred from Active Directory to Ektron CMS400.NET

CMS refers to the following AD sign-in authentication information during sign-in: password, user logon name, and domain. Note that the password is not stored in CMS — CMS only refers to the password during sign-in.

User Groups

User authentication mode has no effect on user groups. To learn more about user groups, see Managing User Groups.

Adding User Information from AD to Ektron CMS400.NET

SeeManually Adding AD Users to Ektron CMS400.NETManually Adding AD Users to Ektron CMS400.NET.

Changing the User Login Name in AD

If a user’s logon name changes in AD, it no longer matches the Ektron CMS400.NET logon name. This discrepancy is flagged on the Active Directory Setup and Active Directory Status screens. You should proceed to the Associate Ektron CMS400.NET Users to Active Directory Users screen, where you can update the user information.

Alternatively, you could

1. Go to the View User Information screen.

2. Select the user whose AD name changed.

3. Click Associate the Ektron CMS400.NET user with Different AD user ().

4. Select the AD user and domain.

See Also: Associating Ektron CMS400.NET Users with Active Directory Users

Editing User Information in Ektron CMS400.NET

Ektron CMS400.NET does not write to AD. This means that you can only change the Username and Domain fields from AD. You can change the following fields on the Ektron CMS400.NET Edit User screen:

First Name

Last Name

email Address

User Language

Disable email Notifications

Warning! If you replace a user in user authentication-only mode, the user’s first name, last name, and email address are not overwritten with information in the active directory.

The Screens of the Active Directory Feature in User Authentication Mode

Since the scope of user authentication mode is limited, only some fields on AD screens are used. For example, on the Active Directory setup screen, the only relevant fields are authentication and domain.

See Also: The Active Directory Setup Screen

Also, on the Active Directory Status Screen, only one discrepancy message may appear:

CMS user needs to be associated with an AD user

See Also: Associating Ektron CMS400.NET Users with Active Directory Users

The View Users Screen works the same for both modes.

See Also: The View User Information Screen


Visit the Ektron Dev Center at http://dev.ektron.com 1-866 - 4 - EKTRON

Ektron CMS400.NET Reference Version 8.02 SP1 Rev 1

Ektron Documentation,© 2011 Ektron, Inc.