Authentication Setup Overview

ResCenter provides an integrated authentication service which is automatically enabled for institutions. This service requires no additional configuration. However, the Authentication Setup page allows institutions to configure additional forms of Directory Server Authentication: LDAP, Microsoft Active Directory, CAS (Central Authentication Service), and SAML.

Using one of the authentication types allows users to sign in to ResCenter using their network credentials. Users no longer have to maintain a separate user name and password to use ResCenter, and passwords are more secure because they are only stored in the authentication type’s directory. This behavior is configured by linking an ResCenter user to a directory.  During login, ResCenter will attempt to authenticate the user against the list of enabled providers defined on the Authentication Setup page.

Using Multiple User Authentication Providers

When multiple user authentication providers are enabled, ResCenter will verify user information with each provider in the list in descending order. The list of providers is ordered from newest (at the top) to oldest (at the bottom); thus, the latest provider is checked first. The default ResCenter provider is always checked last and cannot be edited or disabled. Any user name will first be checked against the list of defined, enabled providers in descending order, and then it will be checked against the ResCenter provider last.