- Adeptia Connect primarily supports 3 forms three types of Authentication: Native Authentication, SAML SSO/SML authentication , and LDAP based AuthenticationFor SSO/SAML only one IDP can be configured. e.g. you cannot have one IDP for External and another one for Internal users
- Recommendation is to have LDAP for Internal users and SSO/SML for External Users
- OAuth2 and MFA are currently not supported
- SAML and LDAP Multi-mode is possible only in Connect but not recommended
- Multi-mode authentication is not supported in AIS (SSO/SAML, LDAP)
- It is recommended to use LDAP authentication for internal users, and a SAML for the external users.
- In multi-mode authentication, a combination of LDAP and SAML is supported. Native authentication is not supported in multi-mode.
- While using a multi-mode authentication with LDAP and SAML, LDAP can only be used for internal users.
- Multi-Factor Authentication is not supported.
Network Diagram with LDAP | Network Diagram with SSO/SAML |
---|---|
SSO/SAML Authentication Flow
...
SAML SSO | |
---|---|
Authentication Flows
LDAP Authentication Flow | SAML SSO Authentication Flow |
---|---|
SAML SSO Authentication Flow
The application will use this mapping to verify user attributes in SAML Response with User attributes in Adeptia. If the value of all the attributes matches, it will allow access :
<?xml version="1.0" encoding="UTF-8"?>
...
</mapping>
</SAMLConfiguration>
...