Page Comparison

This guide is for IT Administrators to setup ADFS for integration with Lucidity Software Products

...

To help understand what benefits are achieved by setting up ADFS, the following summary has been prepared so you can see the difference between an ADFS authenticated system and normal authentication.

Normal Authentication

1. User opens login screen and enters Username and Password.  There is a password reset option.
   
   Image Modified
    
2. Lucidity authenticates against the Username and Password that has been stored within Lucidity Access.   If this authentication fails the user is unable to log in.

...

1. User is presented with a login screen for ADFS that allows them to proceed with an ADFS login ('login' button) or switch to non-domain login if they are accessing the system from outside the company network. 
   
   
   
   
2. Option 1 - User clicks 'Login' button.
   1. Scenario A - User is logged onto the network domain.
      1. Lucidity obtains the current username 'from the browser' that the user used to authenticate against the network domain.
      2. If that username has a corresponding entry in Lucidity Access with appropriate permissions to allow entry into the application, then entry is allowed.
      3. If the username that was used to log onto the network domain does not have a corresponding entry in Lucidity Access, then entry is not allowed.
   2. Scenario A B - User is NOT logged onto the network domain, but still wishes to use domain credentials.
      1. An ADFS login dialog is presented, asking for domain login credentials.
         
         
      2. User enters Username and Password which are authenticated against the domain.
      3. If the Username and Password match a domain account AND there is an account in Lucidity Access with the same Username and appropriate permissions, entry is allowed.
   3. In the instance where entry is not possible using ADFS, the user can still revert to non-domain credentials (see Option 2).
       
3. Option 2 - User clicks 'Login with non-domain credentials' button.
   1. User is presented with a login screen which requires entry of a Username and Password.  User enters these details.
      
      
   2. Lucidity authenticates against the Username and Password that has been created within Lucidity Access.   If this authentication fails the user is unable to log in.
   3. Note that the username and password must be those recorded in Lucidity Access, as this is a non-domain login.
   4. User has the option of reverting the to ADFS login if they separately log onto the network and return to the browser to re-attempt authentication.

...

Instructions for setup of ADFS can be found in the following video and instructions. You can skip some of this if ADFS is already setup.

http://www.youtube.com/embed/fwHIKlAPV0g

...