Administering Users › Users › Authentication and Users

Authentication and Users

The User Properties dialog lets you define CA Harvest SCM users.

If your site uses internal authentication (CA Harvest SCM authentication), you can edit all the fields on the User Properties dialog.

If your site uses external authentication such as Microsoft Active Directory, in the personal information area of the User Properties dialog, you can edit only the Name and Note fields. You cannot edit any other fields (Password, Real Name, Phone #, Ext, Fax# and E-mail). In the Security area, you can enable the options including Disabled and Single Work Station Login while the other options Locked and Change Password on Next Login remain disabled.

For both internal and external authentication, during login, create user, and update user operations:

• If the value of the CASESENSLOGIN field in the HARTABLEINFO table is N, the user name authentication is not case sensitive.
• If the value of the CASESENSLOGIN field in the HARTABLEINFO table is Y, the user name authentication is case sensitive.
• If your site uses external authentication, the CASESENSLOGIN field in the HARTABLEINFO table must be set to match the behavior of the external authentication server.

The following considerations apply when you create a user:

• If your site uses internal authentication, a user is created only if the user name entered does not exist in CA Harvest SCM.
• If your site uses external authentication, such as Microsoft Active Directory, a user is created only if the user name entered does not exist in CA Harvest SCM but does exist in the authentication server, or if the CA Harvest SCM server has been configured for Mixed Authentication Mode and the user name entered does not exist in CA Harvest SCM.

The following considerations apply when you update a user's name definition:

• If your site uses internal authentication, changes to the Name field are permitted only if the new name does not exist in CA Harvest SCM.
• If your site uses external authentication, such as Microsoft Active Directory, changes to the Name field are permitted only if the new name does not exist in CA Harvest SCM but does exist in the authentication server, or if the CA Harvest SCM server has been configured for Mixed Authentication Mode and the External Authentication attribute for the user is reset.