TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Authentication and User Directory
8 Authentication and User Directory
This chapter will outline and explain the different authentication and user directory
mechanisms available in Spotfire. It will also try to guide and advise the Spotfire
administrator on which combination of authentication and user directory should be
used in different situations. For exact instructions on how to configure the different
methods, see the configuration console and its help.
8.1 Overview
Authentication is the function when users prove to the system who they are. The user
directory is where the Spotfire system stores user and group names used to set and
verify permissions. The Spotfire system is able to authenticate users internally or with
external sources. User directory information may be synchronized with an external
source. These settings are called authentication methods and user directory methods,
respectively. Which methods and combinations to select depends entirely on factors
such as number of users and what kind of infrastructure already exists in the network
in which Spotfire is used.
This chapter will provide an overview of the different combinations, instructions on
how to set them up, and advice on which combination to choose, together with
advantages and disadvantages of the different combinations.
8.2 Username and Password Authentication
When users start a Spotfire client, they are normally presented with a login dialog,
where they supply their username and password. Using single sign-on methods,
however, this window is bypassed and other forms of authentication are used, such as
certificates or keys.
The username and password authentication methods supported by Spotfire are:
• LDAP Directory
• Spotfire Database
• Windows NT Domain
• Custom JAAS Module
All of these methods can be configured in the configuration console.
For all methods, usernames are always stored in the Spotfire Database. When using an
external authentication method, passwords and/or other authentication information is
stored elsewhere, such as on an LDAP server or a Windows NT Domain Controller.
TIBCO Spotfire® Server 3.2.2 65 (144)