Creating an External Authentication Configuration Object
This section describes how to create an external authentication configuration object in the Admin Interface. You can also use sec:create-external-security() to create an external authentication configuration object. Once created, multiple App Servers can use the same external authentication configuration object.
Note
If the authentication used in an app server is Kerberos or SAML, only the first external security configuration will be used.
In the Admin Interface, click Security in the left tree menu.
Click External Security.
Click the Create tab at the top of the External Security Summary page. The New External Security page appears:
Complete the appropriate fields:
Field |
Description |
|---|---|
external security name |
The name used to identify this External Security Configuration Object. |
description |
The description of this External Authentication Configuration Object. |
authentication |
The authentication protocol to use: certificate, kerberos, ldap, or saml. The configuration details for LDAP and SAML are described below in LDAP Authentication and SAML Authentication. |
cache timeout |
The login cache timeout, in seconds. When the timeout period is exceeded, the LDAP server reauthenticates the user with MarkLogic Server. |
authorization |
The authorization scheme: |