View source for SOP-5-I-42Q-MES0152 Identity Access Management


<!-- Output copied to clipboard! --><!-----
NEW: Check the "Suppress top comment" option to remove this info from the output.

Conversion time: 4.56 seconds.


Using this HTML file:

1. Paste this output into your source file.
2. See the notes and action items below regarding this conversion run.
3. Check the rendered output (headings, lists, code blocks, tables) for proper
   formatting and use a linkchecker before you publish this page.

Conversion notes:

* Docs to Markdown version 1.0β29
* Thu Jul 09 2020 19:30:20 GMT-0700 (PDT)
* Source doc: SOP-5-I-42Q-MES0152-C Identity Access Management 
* This is a partial selection. Check to make sure intra-doc links work.
* Tables are currently converted to HTML tables.
* This document has images: check for >>>>>  gd2md-html alert:  inline image link in generated source and store images to your server. NOTE: Images in exported zip file from Google Docs may not appear in  the same order as they do in your doc. Please check the images!

----->

<small>[[42Q_Cloud-Based_MES/MOMS|42Q Home]] >[[Account_Services|Account Services]]&nbsp;> Identity Access Management</small>

&nbsp;

&nbsp;
<center>'''Account Services&nbsp;'''</center> <center>'''Identity Access Management&nbsp;'''</center> <center>'''Version MES 15.81'''</center> <center>'''Revision E1'''</center> 
&nbsp;
<p style="text-align: center;">&nbsp;</p> 
&nbsp;

= <span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction"><span class="mw-headline" id="Introduction">Introduction</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span> =

This document outlines the integral role that '''42Q IAM'''&nbsp;(Identity Access Management) plays in enhancing the security and efficiency of our portal. By offering adaptable solutions to cater to various policies, it ensures robust authentication and authorization mechanisms.

The'''42Q IAM '''system serves as the cornerstone of our unified login management for the 42Q portal. Its primary function is to provide a comprehensive suite of tools that not only cater to diverse authentication needs but also reinforce the security landscape.

This document introduces the dual authentication methods offered by 42Q IAM:

*'''Enterprise Authentication''' 
*'''Local Authentication.''' 

In this document, regardless of the chosen path – &nbsp;'''Enterprise''' Authentication or '''Local''' Authentication – users can expect a streamlined and secure process that safeguards sensitive information and preserves user privacy.

Upon accessing the 42Q portal URL, users are promptly redirected to a unified login page orchestrated by the IAM system. This pivotal gateway marks the beginning of a secure and user-centric journey within our portal.

&nbsp;

<br/> '''Figure 1: IAM&nbsp;Login Page'''

'''[[File:AIM Smartlogin.png|900px]]'''

&nbsp;

'''42Q''' has two types of Enterprise Authentication: <u>'''Federated'''</u> and <u>'''Non-Federated'''</u> setups as explained below:

&nbsp;

&nbsp;



== <span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_with_Federation_Setup">Enterprise Authentication with Federation Setup&nbsp;</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span> ==

'''42Q IAM '''supports Federated authentication, which allows users to pass authorized credentials to the portal.

The Enterprise account with federation setup allows users to log in with the UID or email address, if the account is created by email address, users need to log in with their email address.

To access, as an '''Enterprise Authentication''' '''with Federation Setup''' user, follow the steps below:&nbsp;

#Enter '''UID''' or '''email address''' in the '''Username''' field on the unified login page. 
#Select the button '''Next''''''.''' 
#Enter the '''Username''' and '''Password''', then select the '''Submit''' button.&nbsp; 

&nbsp;<br/> '''Figure 2: Enterprise Account with Federation Setup'''

&nbsp;[[File:AIM AccountFed Setup.png|900px|AIM AccountFed Setup.png]]&nbsp;&nbsp;

&nbsp;

&nbsp;


== <span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup"><span class="mw-headline" id="Enterprise_Authentication_without_Federation_Setup">Enterprise Authentication without Federation Setup</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span> ==

<span class="mw-headline" id="Enterprise_accounts_without_federationsetup_will_prompt_from_password_and_validate_credentials_with_the_previously_configured_enterprise_for_that_instance.">'''Enterprise accounts''' '''<u>without federation</u>&nbsp;'''setup will prompt from password and validate credentials with the previously configured enterprise for that instance. &nbsp;</span>

<span class="mw-headline" id="Users_are_allowed_to_log_in_with_their_username.2C_the_username_can_be_UID_or_email_address.">Users are allowed to log in with their username, the username can be UID or email address.&nbsp;</span>

<span class="mw-headline" id="To_access_42Q.2C_as_an_Enterprise_user_without_federation.2C_follow_the_steps_below:">To access '''42Q''', as an '''Enterprise''' user '''without federation''', follow the steps below:&nbsp;</span>

&nbsp;

#Enter the '''Enterprise''' account in the '''Username''' field at the unified login page. 
#Select the '''Next''' button. 

<br/> '''Figure 3: Enterprise Account without Federation Login'''

[[File:AIM Local .png|900px|AIM Local .png]]

&nbsp;
<ol start="3">
<li>The system will ask users to input the password.</li>
</ol>

&nbsp;

'''Figure 4: Input Password Form'''

[[File:AIM PasswordForm.png|900px|AIM PasswordForm.png]]

&nbsp;
<ol start="4">
<li>Once the username and password are valid, the system redirects to the '''42Q''' home page with the user signed in.</li>
</ol>

&nbsp;

&nbsp;

'''Figure 5: Enterprise&nbsp; Account Login 42Q Portal'''

[[File:AIM Login42QPortal.png|900px|AIM Login42QPortal.png]]

&nbsp;

&nbsp;

&nbsp;

&nbsp;

== <span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication"><span class="mw-headline" id="Local_Authentication">Local Authentication</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span> ==

'''42Q IAM''' also supports '''Local '''authentication; in the example below, the '''username''' is one '''Local '''user. Also, Local users can be set up with '''alphanumeric''', or '''email format'''.

&nbsp;

<br/> '''Figure 6: Local Account'''

[[File:AIM User LocalAccount.png|900px]]

&nbsp;

To access&nbsp;'''42Q''',&nbsp;as a '''Local''' user follow the steps below:&nbsp;

#Enter the '''Local''' user account in the '''Username''' field at the unified login page. 
#Select the '''Next.''' 
#The system will ask users to input the password. 
#Once the username and password are valid, the system redirects to the '''42Q''' home page with the user signed in. 

&nbsp;

=== <span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password"><span class="mw-headline" id="Forgot_Password">Forgot Password</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span> ===

When users forget their password, they can reset their password by clicking the&nbsp;'''Forgot password?''' link on the landing page is an option is available for&nbsp;'''Local Users'''. Once clicked, users will be redirected to the '''Account Services '''to reset the password and the user's supervisor or support team will provide assistance for password changes.

&nbsp;

For '''Enterprise users''', an email will be provided with the following information concerning password changes. An expired link will be emailed to users with a link provided to change the desired password.&nbsp;

<br/> '''Figure 8: Forget Password'''

[[File:AIM PassForgot.png|900px]]

&nbsp;

<br/> '''<u>Note</u>''': In 60 days (default value) '''local users''' will have to change their password and if they haven't had a chance to log into the system during that period, their account will be inactivated.

----

&nbsp;