Configuring User Authentication Options
=======================================

General Options
---------------

General options for authentication criteria, device ownership, logon recovery,
and restrictions can be found under **Preferences > User Authentication > User
Authentication**

Available Options
'''''''''''''''''

- **Authentication Criteria**

 - Select **Node** or **Device** (Mac+IP or MAC).

- **Authorized IP**

 - Specify whether to automatically set Authorized IP as IP address first
   authenticated from. This applies when the Authorized IP in the User
   Management settings is blank.

- **Authorized MAC**

 - Specify whether to automatically set Authorized MAC as MAC address first
   authenticated from. This applies when the Authorized MAC in the User
   Management settings is blank.

- **Automatic Ownership**

 - Specify whether to automatically assign User and Department ownerships to
   IP and/or MAC when a user is authenticated.

- **Regex for Username**

 - Enter a regular expression to validate username.

- **Hiding Username**

 - Hide username under asterisks during authentication/

- **Log Out Button**

 - Specify whether to display Log Out button in CWP page.

- **Find Username / Reset Password**

 - Enable or disable recovery for lost username/password.

- **Verification code valid time**

 - Set the validity code valid time for sms 2 factor authentication ( 2fa / mfa )

- **Displaying Authentication Info**

 - Specify whether to display User Authentication Information in Agent Tray
   Menu and CWP page.

- **User Info for Node Info**

 - Specify whether to add User Information (Name and Description) into Node
   Information for User Account Request approval.

Configuring Authentication Options by Single node
-------------------------------------------------

#. Click a node **IP Address** and select **Policy tab**
#. Select one option under **User Authentication Policy**

Available Options
'''''''''''''''''

- **Comply with Authentication Policy under Node Policy**
- **Require User Authentication (Allow All Users)**
- **Require User Authentication (Allow Specified User(s))**

Configuring Authentication Options by Group
-------------------------------------------

Node Authentication policies determine when and how nodes of a given group will
be required to authenticate, as well as the conditions of the process.

To configure options for authentication methods, requirements, time
restrictions and logon procedure, select a node policy under **Policy > Node
Policy > [Policy Name]** and scroll down to **Advanced > Authentication** in
the main panel.

Available Options
'''''''''''''''''

- **Authentication Method**

 - Select **Host Authentication** (Allow by node identity) or **Password
   Authentication**.

 - For **Password Authentication** specify allowed **Authentication Sources**
   and Enable/Disable **2 Factor Authentication.** ( 2fa / mfa )

- **Single Sign-On Method**

 - Select **Active Directory**, **External API** or **Genian API** and enter
   required info.

- **Auth User Group**

 - Select a user group to allow for authentication from the policy member
   nodes.

- **Auto-Logout**

 - Enable to log out users after a set time period.

- **Auto-Logout For Down Node**

 - Enable to log out users after a node link status is down for a set time
   period.

- **Reauthentication Interval**

 - Specify how often to renew authentication.

- **Session Timeout Notification**

 - Specify time prior to the login session expiration that you want to notify
   users.
 - Agent required.

- **Custom User Login Page URL**

 - Specify URL for a custom user login page which will be redirected when a
   user clicks a Login button in CWP page.

- **Authentication at Startup**

 - Specify whether to require Authentication when the computer restarts or
   wakes.
 - Agent required. Not compatible when Single Sign-On is enabled.

- **Display Name of Username**

 - Specify a display Name of Username for use on Captive Portal and Agent
   Authentication prompt.

- **Display Name of Password**

 - Specify a display Name of Password for use on Captive Portal and Agent
   Authentication prompt.