Web Interface website accounts and user authentication (Web Interface)
When you use a Web Interface website, you must log in as a valid user.
There are four ways in which a Web Interface website can be set up to authenticate users:
• Web Interface website account authentication.
• LDAP authentication.
• Microsoft Entra ID authentication
• PingFederate authentication
|
|
P:ingFederate authentication and Microsoft Entra ID authentication are mutually exclusive.
|
Web Interface website account authentication (local user)
When a Web Interface website supports account authentication, that website has been set up to allow users to create their own Web Interface website accounts.
Each user that wants to use the Web Interface website can create an account. When that account has been approved, they can log in to the Web Interface website using the user name and password that is associated with that account.
From PTC Modeler 10.3, you cannot use the @ symbol in the username while creating Local User accounts.
If you have such accounts that are created prior to 10.3, then these accounts will be listed in the status.log file with a warning:
WARNING: The following local user accounts contain the @ symbol in their username, it is recommended they be removed.
........................................................................
[email protected]
[email protected]
........................................................................
We recommend that the Web Interface Admin delete these accounts and advise the affected users to register new accounts.
|
|
Users will only be able to view public models.
|
LDAP authentication
When a Web Interface website supports LDAP authentication, that website has been set up to work with a specific domain.
If you are a member of that domain, you can log in to the Web Interface website using your Windows user name and password. The Web Interface website will use your Windows credentials to validate you as a valid user.
|
|
You must log in using your domain and user name. For example, MyDomain\MyUserName.
User will be able to view Public Read Models and Private Models they have been give explicit access to.
|
Microsoft Entra ID
Users are authentication using Microsoft Entra ID.
|
|
User will be able to view Public Read Models and Private Models they have been give explicit access to.
|
PingFederate authentication
Users are authenticated using Microsoft Entra ID.
|
|
User will be able to view Public Read Models and Private Models they have been give explicit access to.
|
Creating a Web Interface website account
You can create a Web Interface website account for yourself through the Web Interface website.
To create an account: connect to the Web Interface website, click the Register link, enter your details, and click the Register button.
You cannot use a new account until it has been approved by the Web Interface website administrator.
The Web Interface website may be set up for automatic approval of new accounts:
• If the website is set up for automatic approval of new accounts, you can immediately use the user name and password associated with the account to log in and view models.
• If the website is set up for manual approval of new accounts, you should contact the Web Interface website administrator to arrange for your account to be approved.
The Contact page of the Web Interface website should provide information for contacting the Web Interface website administrator.
Managing your account
After your account is approved, you can change the password as required.
The following changes can be made only by the Web Interface website administrator:
• Unlocking the account. Failed log in attempts can result in an account being locked.
• Deleting the account.