Administering › Managing Role Objects › Role Authentication

Role Authentication

CA OM Web Viewer users can authenticate with LDAP, External Security EXIT, or Mainframe Security. Advanced User type roles can authenticate with either mainframe security or LDAP security using the LDAP Mainframe Hybrid Profile Object. The Basic User can authenticate with three methods, depending on role settings. However, all other role types require Mainframe Security.

Consider the following information about authenticating roles:

• The Edit Role panel controls the authentication method of the role.
• You must select a Role Type of Basic User or Advanced User to change a Role authentication method from the default authentication method, which is mainframe authentication.
• If you select LDAP authentication with a Role Type of Basic User, supply both LDAP information and a profile (proxy mainframe account) for the role.
• If you select LDAP authentication with a Role Type of Advanced User, you must supply both LDAP information and the built in LDAP Mainframe Hybrid Profile Object
• Only Roles with a Role type of Basic User or Advanced User can use LDAP authentication.
• You can use automatic enrollment with an LDAP authenticated role.
• If you select External Security EXIT authentication, you must select Non-Mainframe users with a predefined profile named EXIT and a predefined directory name EXIT.
• Automatic enrollment is selected from the role panel for any roles defined with External Security EXIT authentication.
• You do not have to select automatic enrollment from the role panel for mainframe automatic enrollment.

  Mainframe automatic enrollment places mainframe security authenticated users into the role named Default User.