Release 10.1A: OpenEdge Development:
Basic Database Tools

Authentication System Maintenance

The options of the Authentication System Maintenance submenu allow you to specify details about third party authentication systems and modules used to authenticate users who connect to your database through their applications. For more information about authentication and application security, see OpenEdge Getting Started: Installation and Configuration .

The Authentication System Maintenance submenu provides two options, as described in the following sections:

Security Authentication Systems
Authentication System Domains

Security Authentication Systems

Use the Authentication Systems dialog box to define authentication systems for use with your 4GL applications.

Note: The connected user must be a DBA to access this dialog box.

When you select the Security Authentication Systems option from the Authentication System Maintenance submenu, the Authentication Systems dialog box appears. The browser at the top of the dialog box contains the following fields:

Domain Type — Displays the type of authentication system (LDAP, KERBOS, RSA, KEON, Internal, for example).
Description — Description of the authentication system.

To update an authentication system, select it in the browser and edit the fields described below. To create a new authentication system record, select Create and enter information into the fields described below:

Domain Type — The type of authentication system (LDAP, KERBOS, RSA, KEON, Internal, for example).
Note: This field is only enabled when creating a new system. You cannot edit an existing domain type. To change the domain type of an existing system, delete the current system record and add a new one.
Description — Description of the authentication system.
Comments — Specific authentication system details.

The following control options appear on the Authentication System dialog box:

Done — Closes the dialog. This option is disabled until you select Save or Cancel.
Create — Creates a new authentication system record and resets the fields for input.
Save — Saves changes to the current authentication system record and resets the fields for input.
Cancel — Cancels current changes to the authentication system record. Note that this option is disabled until you select Create or edit one of the fields for an existing record. If you select Cancel while creating a new record, the previously selected record displays.
Delete — Deletes the current administration system record after prompting for verification. If you delete a record, the next record in the browser appears. If you delete the last record, the Data Dictionary clears all of the fields in the Authentication Systems dialog box.

Table 10–9 describes hot keys for use with this dialog box.

Table 10–9: Authentication Systems dialog hot keys

Hot key	Description
CTRL+A	Selects Create, if the option is enabled.
CTRL+N	Selects Cancel, if the option is enabled.
DEL	Selects Delete, if the option is enabled. Note: This hot key only applies if an authentication system record is selected in the browser.
F1/GO	Selects Save, if the option is enabled. Otherwise, selects Done.

Authentication System Domains

Use the Authentication System Domains dialog box to define authentication system domains for use with your 4GL applications.

Note: The connected user must be a DBA to access this dialog box.

When you select the Authentication System Domains option from the Authentication System Maintenance submenu, the Authentication System Domains dialog box appears. The browser at the top of the dialog box contains the following fields:

Name — Displays the logical name of a single authentication system that can be used to authenticate or validate the authentication of a user account.
Type — Displays the type of authentication system (LDAP, KERBOS, RSA, KEON, Internal, for example).
Description — Description of the authentication domain.

To update an authentication system domain, select it in the browser and edit the fields described below. To create a new authentication system domain, select Create and enter information into the fields described below:

Type — The type of authentication system (LDAP, KERBOS, RSA, KEON, Internal, for example).
Note: This field is only enabled when creating a new domain. You cannot edit an existing domain type. To change the existing domain, delete the current domain record and add a new one.
Name — The logical name of a single authentication system that can be used to authenticate or validate the authentication of a user account.
Note: This field is enabled only when creating a new domain. You cannot edit an existing domain name. To change the name of an existing domain, delete the current domain record and add a new one.
Access Code — Encrypted access code phrase used to validate the identity and integrity of any CLIENT-PRINCIPLE issued by the authentication system represented by this domain.
Audit Context — The audit record context value when a _client-session record is recorded to the database.
Runtime Options — A comma delimited list of runtime options for use with the domain’s 4GL PVM.
Note: See OpenEdge Getting Started: Installation and Configuration for more information about the 4GL PVM.
Description — Description of the authentication domain.
Comments — Specific authentication domain details.
Domain Enabled — Activate to specify the current domain is enabled.

The following control options appear on the Authentication System dialog box:

Done — Closes the dialog. This option is disabled until you select Save or Cancel.
Create — Creates a new authentication system domain record and resets the fields for input.
Save — Saves changes to the current authentication system domain record and resets the fields for input.
Cancel — Cancels current changes to the authentication system domain record. Note that this option is disabled until you select Create or edit one of the fields for an existing record. If you select Cancel while creating a new record, the previously selected record displays.
Delete — Deletes the current administration system domain record after prompting for verification. If you delete a record, the next record in the browser appears. If you delete the last record, the Data Dictionary clears all of the fields in the Authentication System Domains dialog box.

Table 10–9 describes hot keys for use with this dialog box.

Table 10–10: Authentication System Domains dialog hot keys

Hot key	Description
CTRL+A	Selects Create, if the option is enabled.
CTRL+N	Selects Cancel, if the option is enabled.
DEL	Selects Delete, if the option is enabled. Note: This hot key only applies if an authentication system record is selected in the browser.
F1/GO	Selects Save, if the option is enabled. Otherwise, selects Done.