...
| Child pages (Children Display) |
|---|
Authentication
...
See authentication and authorization summary steps below for quick reference.
Authentication
- You can configure users in FlexDeploy internal realm or use external LDAP server.
- See Users to maintain users in FlexDeploy internal realm. If you use this option then you are not relying on external directory servers.
- You can use Active Directory or other LDAP server for authentication and authorization, see Realms for reference. FlexDeploy user record will still be created when user from external LDAP server logs in for first time. See new user process on Realms page.
- You can also use both internal as well external realm for users. Users will be first authenticated against external realms and if not successful internal realm will be used.
Authorization
In order to control access to various parts of FlexDeploy, you will be configuring permissions. FlexDeploy supports coarse and finer grained permissions, see below for details.
| Tip |
|---|
Permissions are mainly controlled using FlexDeploy Groups even when using external realm. When using external realm, you can map external groups to FlexDeploy groups which allows for less security maintenance when new users start using FlexDeploy. |
- Global permissions
- Finer grained permissions
- Project - You can control access to specific projects for FlexDeploy groups. This allows you to control finer grained access (create, configure, execute etc.) at project of folder level. See Project Security.
- Release
- Pipeline