Permissions & Access

Configure the contents related to application security, such as authentication, access control, etc. Select "Permissions & Access" from the Application Settings in the side menu.

Authentication

Sets whether or not authentication is required to use the application.

Required

Since authentication is required to use the application, the sign-in screen will appear first.

Not Required

The sign-in UI is not displayed.

Note

• If [Off] is selected, there are no settings after the sign-up permission.
• After 5 failed sign-in attempts, the user is locked out for 1 second. The lockout period doubles after each failed attempt, up to a maximum of approximately 15 minutes.
• Authentication and external authentication can be configured in combination.

Sign In required to access the app

Set whether to allow users to sign up by themselves when authentication is required to use the application.

Enable

Allow users to sign up for themselves.

Disable

Do not allow users to sign up by themselves. The administrator creates the user.

Note

Multiple applications can be deployed in the execution environment. Authentication is performed by the only authentication module in the execution environment. Therefore, if one of the applications is authenticated, the other applications will also be authenticated. If there is an application that you want only certain users to be able to access, you will need to set up the following access groups. In such cases.

Access Groups

Although multiple applications can run in the execution environment, if you want only specific users to be able to access a particular application, you can create an accessible group and set that group to the application. Enter the group name directly in the "Group" field. To set multiple groups, enter comma-separated entries. The sum of the users in each group is the list of users who have access to that application. By default, the Global group is set to include all users.

Note

If you want to give access only to specific users, you should replace the Global group with another group.

Allow Multi Factor Authentication

Specify whether or not the application requires multi-factor authentication (MFA) for enhanced security over ID/password authentication.

Required

For users who have not configured multi-factor authentication, the user is directed to the multi-factor authentication settings. When "Make MFA mandatory for all users" is turned on, the user is always directed to the multi-factor authentication settings at sign-in and prompted to enable multi-factor authentication.

Not Required

No inducement to set up multi-factor authentication is provided.

Note

• The "enable/disable" setting for multi-factor authentication is retained as user information and is common to all applications in the execution environment.
  Therefore, users with multi-factor authentication enabled will always require multi-factor authentication to sign in to applications in the execution environment.
  Settings cannot be changed on a per-application basis within the execution environment.
• To disable multi-factor authentication, click the Disable button on the MFA Setting screen (Sign In MFA) or reset the password on the Reset Password screen (Reset Password Step 1).
  To re-enable, click the Enable button on the MFA Setting screen (Sign In MFA) and set up multi-factor authentication.

Show WPNX sign-in screen when multi-factor authentication is linked

It can be set whether or not to display the sign-in screen of the external IdP without going through the WPNX sign-in screen when using the application.

Yes

• Displays the sign-in screen of the authentication UI.

No

• If [No] is selected, the [IdP] field will be displayed.
  Displays the IdP sign-in screen set in the [IdP] field.