Authentication Service (baja-AuthenticationService)

This component manages how users verify their identity to the station, using authentication schemes. Some schemes require password configuration, others do not. The AuthenticationService node is located in the Services container.

This component is located in the baja palette.

Figure 1. AuthenticationService properties

To access, expand Config > Services and double-click AuthenticationService.

PropertyValueDescription
Authentication Schemesadditional propertiesIdentifies the authentication scheme provided by the baja module. The New Station wizard installs two default authentication schemes.

DigestScheme provides SCRAM-SHA256 (Salted Challenge Response Authentication Mechanism) technology for connecting framework entities. Several messages are passed back and forth to prove the client knows the password. For property descriptions, refer to “baja-DigestScheme.”

AXDigestScheme provides compatibility with stations running a previous software version. For property descriptions, refer to “baja-DigestScheme.”

Additional schemes may reside in other palettes. Developers may also create authentication schemes for special circumstances. You pick the one or two schemes you wish to use, drag them from the palette and drop them directly under the AuthenticationService in the Nav tree.

A topic for each individual scheme documents the properties for each.

SSO Configurationadditional propertiesEnables aspects of SSO (Single Sign-On) functionality, such as whether or not to automatically attempt single sign on when users log on to a station.

“SSO Configuration (baja-SSOConfiguration)” documents the additional properties.

Strict Authenticationtrue or false (default)Enforces authentication controls.
Default Authentication Schemedrop-down listSelects the default authentication scheme to use.