You are here: About configuring the vault > Configuring authentication

Configuring authentication

By default, Meridian Enterprise identifies a user by single sign-on (the current user's Windows account name) and does not prompt the user to log on when they open a vault. The FDA Module is compatible with single sign-on and also supports explicit authentication to open a vault with any Meridian Enterprise client application including Application Integration, the application links, and Local Workspace actions.

When authentication is required, users are shown the Open Vault dialog. The user must type the same Windows account name and password as the account currently logged on to Windows. Authentication only succeeds if the credentials match. If so configured, failure to correctly type the credentials within the allowed number of attempts will lock the computer until the correct credentials are typed.

To configure a vault's authentication settings:

  1. In Configurator, expand Environment in the configuration tree and select Vault Settings. The vault’s settings appear in property pages in the right pane.
  2. Click the Authentication tab. The current authentication options are shown.
  3. Click the Edit button to modify the settings.
  4. Click options or type values using the descriptions in the following table.
Authentication options
Option Description

Authenticate logon credentials with the operating system

Authenticates the user's credentials with the operating system to authorize opening the current vault.

Note    If this option is enabled after a vault has already been published as a web location for Web Access, access will be denied to users until the vault is republished for Web Access.

Logon retries

The number of authentication attempts to allow users before locking the computer.

Lock computer when all retries have failed

Locks the user's computer to prevent further access to documents. The identity of the user or their credentials should then be verified by a system administrator. The account must be unlocked using the operating system's user management tools.

Default domain name

The Windows domain within which the users of this vault should be authenticated. If this option is left blank, users must enter the domain name when they enter their user name, for example, MYDOMAIN\MyName.

Remember user name

Retains the user name (but not the password) for subsequent authentication requests.

Use electronic signatures on workflow transitions

Requires electronic signatures when workflow transitions are performed for which signatures have been enabled as described in About electronic signatures.

Show reason page

If enabled, shows a dialog box when documents are electronically signed that contains configurable disclaimer text and prompts the user to select a reason why they are signing the documents.

This lookup list

The name of an existing lookup list from which to show the reasons for signing.

This expression

A VBScript expression to evaluate that returns the reasons to show for signing.

Disclaimer

Text to show in the dialog box, for example:

By entering your user ID and password, you are verifying this document’s content and properties congruent with your responsibilities. As such, you have reviewed and are approving the document for it’s intended use.

Remember user name for batches of electronic signatures

Retains the user name (but not the password) for each electronic signature required by a batch of documents as described in About electronic signatures.

  1. Click OK to save your changes.

Warning    If the Authenticate logon credentials with the operating system option is enabled, the vault is published with Web Access, and the website is configured with Basic authentication, unauthorized user access to the vault cannot be prevented completely. We do not recommend using that authentication method and recommend that it be set to Windows integrated authentication instead.

Related concepts

About electronic signatures


www.bluecieloecm.com