Permissions & Access

Configure the contents related to application security, such as authentication, access control, etc. Select "Permissions & Access" from the Application Settings in the side menu.

Authentication

Sets whether or not authentication is required to use the application.

On

Since authentication is required to use the application, the sign-in screen will appear first.

Off

The sign-in UI is not displayed.

Tips

Tips

• If [Off] is selected, there are no settings after the sign-up permission.
• After 5 failed sign-in attempts, the user is locked out for 1 second. The lockout period doubles after each failed attempt, up to a maximum of approximately 15 minutes.

Sign In required to access the app

Set whether to allow users to sign up by themselves when authentication is required to use the application.

On

Allow users to sign up for themselves.

Off

Do not allow users to sign up by themselves. The administrator creates the user.

Tips

Tips

Multiple applications can be deployed in the execution environment. Authentication is performed by the only authentication module in the execution environment. Therefore, if one of the applications is authenticated, the other applications will also be authenticated. If there is an application that you want only certain users to be able to access, you will need to set up the following access groups. In such cases, we recommend setting the sign-up permission to [Off].

Access Groups

Although multiple applications can run in the execution environment, if you want only specific users to be able to access a particular application, you can create an accessible group and set that group to the application. Enter the group name directly in the "Group" field. To set multiple groups, enter comma-separated entries. The sum of the users in each group is the list of users who have access to that application. By default, the Global group is set to include all users.

Tips

Tips

If you want to give access only to specific users, you should replace the Global group with another group.

Allow Multi Factor Authentication

Specify whether or not the application requires multi-factor authentication (MFA) for enhanced security over ID/password authentication.

On

For users who have not configured multi-factor authentication, the user is directed to the multi-factor authentication settings. When "Make MFA mandatory for all users" is turned on, the user is always directed to the multi-factor authentication settings at sign-in and prompted to enable multi-factor authentication.

Off

No inducement to set up multi-factor authentication is provided.

Tips

Tips

• The "enable/disable" setting for multi-factor authentication is retained as user information and is common to all applications in the execution environment.
  Therefore, users with multi-factor authentication enabled will always require multi-factor authentication to sign in to applications in the execution environment.
  Settings cannot be changed on a per-application basis within the execution environment.
• To disable multi-factor authentication, click the Disable button on the MFA Setting screen (Sign In MFA) or reset the password on the Reset Password screen (Reset Password Step 1).
  To re-enable, click the Enable button on the MFA Setting screen (Sign In MFA) and set up multi-factor authentication.