Configuring authentication


	BlueCielo Meridian FDA Module 2013 Configuration Guide \| BlueCielo ECM Solutions

You are here: About configuring the vault > Configuring authentication

Configuring authentication

By default, Meridian Enterprise identifies a user by single sign-on (the current user's Windows account name) and does not prompt the user to log on when they open a vault. The FDA Module is compatible with single sign-on and also supports explicit authentication to open a vault with any Meridian Enterprise client application including Application Integration, the application links, and Local Workspace actions.

When authentication is required, users are shown the Open Vault dialog. The user must type the same Windows account name and password as the account currently logged on to Windows. Authentication only succeeds if the credentials match. If so configured, failure to correctly type the credentials within the allowed number of attempts will lock the computer until the correct credentials are typed.

To configure a vault's authentication settings:

In Configurator, expand Environment in the configuration tree and select Vault Settings. The vault’s settings appear in property pages in the right pane.
Click the Authentication tab. The current authentication options are shown.
Click the Edit button to modify the settings.
Click options or type values using the descriptions in the following table.

Authentication options
Option	Description
Authenticate logon credentials with the operating system	Authenticates the user's credentials with the operating system to authorize opening the current vault. Note If this option is enabled after a vault has already been published as a web location for Web Access, access will be denied to users until the vault is republished for Web Access.
Use electronic signatures on workflow transitions	Requires electronic signatures when workflow transitions are performed for which signatures have been enabled as described in About electronic signatures.
Remember user name	Retains the user name (but not the password) for subsequent authentication requests.
Remember user name for batches of electronic signatures	Retains the user name (but not the password) for each electronic signature required by a batch of documents as described in About electronic signatures.
Default domain name	The Windows domain within which the users of this vault should be authenticated. If this option is left blank, users must enter the domain name when they enter their user name, for example, MYDOMAIN\MyName.
Logon retries	The number of authentication attempts to allow users before locking the computer.
Lock computer when all retries have failed	Locks the user's computer to prevent further access to documents. The identity of the user or their credentials should then be verified by a system administrator. The account must be unlocked using the operating system's user management tools.

Click OK to save your changes.

Warning If the Authenticate logon credentials with the operating system option is enabled, the vault is published with Web Access, and the website is configured with Basic authentication, unauthorized user access to the vault cannot be prevented completely. We do not recommend using that authentication method and recommend that it be set to Windows integrated authentication instead.

Related concepts

About electronic signatures