User Prototype (baja-UserPrototype)

This component is an alternative to the legacy default prototype. For remote authentication schemes, it provides better control over user creation and where user properties come from.

Note: The SAML Authentication Scheme only supports the baja-UserPrototype. While LDAP and Kerberos support this user prototype as well as the default user prototype.

Although the properties are similar to those of the default prototype, UserPrototype has only the properties that support SAML authentication. Also, it has an Overridable user property that, when set to true, prevents a value from being overwritten with a default value at next login.

Figure 1. UserPrototype properties


To use this component, expand Config > Services > UserService > UserPrototypes, open the baja palette and drag a UserPrototype component to the UserPrototypes folder.

To view these property groups in a station, expand Config > Services > UserService > UserPrototypes and double-click a UserPrototype component.

The topic “User Prototype Property (baja-UserPrototypeProperty)” documents the individual sub-properties of a user prototype.