Support Support HYPERPLANNING

  • Delegate authentication to user's Webspaces

Users who connect to the database from a web browser or the mobile application must authenticate themselves with a username and password. This step can be delegated to a single sign-on service using CAS, SAML2 or WS-Federation protocols.
The Server HYPERPLANING.FR must be deactivated before proceeding with the configuration.

Delegate authentication to the Client via a CAS Server

  1. From the panel My schedules > HYPERPLANNING.net of the console , go to the tab Delegate the authentication.
  2. On the line CAS Protocol, click on the button to enter a new configuration. You can enter several per protocol, but only one can be activated (double-click in the column Active).

  1. Enter the URL where the CAS server is running. Underneath are the authentication and validation URLs.
  2. If you want users to be able to login via HYPERPLANNING authentication as well, tick Authorize authentication by the controller, without querying the CAS server

  1. Click on the button Users' identification parameters at the top right to choose the type of user recognition.
  2. In the pop-up window, choose the type of user recognition from the drop-down menu:
    • With the identity of the user: these are the fields exchanged between CAS and the Controller that will allow the user to be recognized when connecting for the first time. The designation of these fields must be indicated by CAS. The same applies to the categories.
    • With the CAS identifier entered in HYPERPLANNING: the administrator must import in HYPERPLANNING all the CAS identifiers of the users so that they can connect via CAS.
  3. Tick in the table to activate the delegation for the Administrative mode.
  4. If there are matching problems between a user and his CAS ID, from a Client , go to the tab Communication > Identity management > Reconciliation of the identities and reconcile manually.
  5. To modify the parameters, on the configuration line, click on the button .

Delegate authentication to the Client via Ws-Federation

  1. From the panel My schedules  > HYPERPLANNING.net of the console , go to the tab Delegate the authentication.
  2. On the line Ws-Federation Protocol, click on the button  to enter a new configuration. You can enter several per protocol, but only one can be activated (double-click in the column Active).
  3. In the pop-up window:
    • enter the URL of the ADFS server (address in https).
    • the URL of the Controller HYPERPLANNING for the ADFS server to send the authentication response.
  4. If you want users to be able to access HYPERPLANNING without going through the ADFS server, tick Authorize the authentication by the Controller, without querying the Ws-Federation server. In this case, the users will have to connect with their HYPERPLANNING username and password.
  5. Click on the button Users' identification parameters at the top right to choose the type of user recognition.
  6. Tick in the table to activate the delegation for the Administrative mode.
  7. To modify the parameters, on the configuration line, click on the button .

Delegate authentication to the Client via SAML2

  1. From the panel My schedules  > HYPERPLANNING.net of the console , go to the tab Delegate the authentication.
  2. On the line SAML2 Protocol, click on the button  to enter a new configuration. You can enter several per protocol, but only one can be activated (double-click in the column Active).
  3. In the pop-up window enter:
    • the URL of the SAML server (recovery of the XML configuration file).
    • the URL of the Controller HYPERPLANNING so that the SAML server sends the authentication response.
  4. If you wish that the users can also access HYPERPLANNING without passing by the SAML server, tick Authorize the authentication by the Controller, without querying the SAML server. In this case, the users will have to connect with their HYPERPLANNING username and password.
  5. Click on the button Users' identification parameters at the top right to choose the type of user recognition.
  6. Tick in the table to activate the delegation for the Administrative mode.
  7. To modify the parameters, on the configuration line, click on the button .
Was this content useful to you?
https://docs.index-education.com/docs_en/en-hyperplanning-support-page-198-2962-delegate-authentication-to-user-s-webspaces.php

Can't find an answer to your question ?

Contact our support

INDEX ÉDUCATION | © 2024 - C