Strategies#
Strategies are the way the Security Portal authenticates a user. Each strategy connects the Security Portal to one identity management system, where the user credentials and security information are stored.
A tenant can have several strategies configured at the same time, so users can authenticate against more than one source without complex configuration. For how strategies fit into the overall sign-in flow, see How the Security Portal Works.
Supported Strategies#
| Strategy | Type | Plugin | Out of the Box |
|---|---|---|---|
| OpenID Connect | open-id-connect | @criticalmanufacturing/auth-plugin-openidconnect | Yes |
| Windows Active Directory | local-ActiveDirectory | @criticalmanufacturing/auth-plugin-local | Yes |
| Local User Accounts | local-CoreDatabase | @criticalmanufacturing/auth-plugin-local | Yes |
| LDAP Server | local-LDAP | @criticalmanufacturing/auth-plugin-local | No |
| Barcode/QR Code | local-barcode | @criticalmanufacturing/auth-plugin-local | No |
| WebAuthn | local-WebAuthn | @criticalmanufacturing/auth-plugin-local | Yes |
| OAuth2 Authorization Grant Flow | oauth2-AuthorizationGrantFlow | @criticalmanufacturing/auth-plugin-oauth2 | No |
Table: Supported strategies
Microsoft Entra ID has no dedicated strategy: it signs users in through the OpenID Connect strategy. For the setup, see Microsoft Entra ID.
The strategies available out of the box are created by the installation, and you enable and configure them in DevOps Center. The other strategies, and any additional strategy of the same type, are added through a customization package. For more information, see Deployment via CmfEntrypoint ↗ in the Developer Portal.
Each strategy page describes its parameters. For how to add a strategy to a tenant, the properties common to all strategies, and the database connection used by the local strategies, see Authentication Strategies.
Two-Factor Authentication#
The Security Portal supports the following two-factor authentication mechanisms:
- Static PIN
- TOTP ↗ code
Custom Strategies#
If none of the provided strategies fits your identity management system, you can add a custom strategy to the Security Portal. To implement one, see Authentication Strategies ↗ in the Developer Portal.