Question

Internal and Externam Users Separate Authentication

0

Hi, Is there a way to separate internal vs external users as far as authentication? for example for internal maybe use LDAP, and external maybe mendix built-in tables? Thanks Shannon

asked 2018-07-30

Shannon Ma

2 answers

0

Thanks Eric.

Since during login we dont know the role yet, so it will actually check LDAP first then local?

Shannon

answered 2018-07-30

Shannon Ma

Eric Tieniber · Accepted Answer · 2018-07-30

Yes you can. In the case of the LDAP module, it has a setting to choose specific user roles that will not be part of LDAP authentication, and instead will authenticate locally. In this case, both types of users will use the same login page.

If you decide to use SAML for true SSO, you can have a default sign-on page for your external users with a link at the bottom to the SSO process for internal users.