User realm
From VYRE
Unify supplies a unique extendible User Realm API for user and user group management. This allows users to implement bespoke realms connecting to any external user resources. Unify comes with three realm implementations out of the box, JDBC realm, LDAP realm and Consolidated realm. With the extendible User Realm API you can allow users in your existing user database to log into sites published with Unify.
Contents |
Realms Settings
There are certain settings which it is possible to set for each realm, not matter what type it is. In addition to these settings, there are a number of settings which can be set depending on the type of realm. these settings can be edited in the backend by going to Users and groups -> User Realms -> {realm you want edit}.
Default Settings
These settings exist for every realm, no matter what type it is.
Name
The name of the realm. Used to identify a particular in numerous places, such as choosing a realm in the User edit portlet
Description
Description of the realm. This is never seen on any other page other then the realm edit/create page.
Password expiration
By default this is set to never. It is possible to choose a time period. When a time period is chosen, every time an user logs it, Unify will check to see when their password was last changed. If it was changed longer ago than the time period set here, the user will be redirect to the expiration page.
User account locking
If this is set, it is possible to choose a number of login attempts an user is allowed before their account is locked. When a user fails to successfully login after that number of attempts, their account will be locked. It is possible to chose how the account will be unlocked. When manually is chosen, it means then a User with enough permissions must go in and unlock the account. When automatic is chosen, the user will be able to try to log in again after the the time that is chosen.
User account deactivation
This is turned off by default. Turning this on requires a Cron expression to be specified for the realm.
When this is turned on, a scheduled task will be run according to the CRON expression that is specified. This scheduled task will search through all user profiles in the realm. Any profiles meet the deactivation criteria will be deactivated. See Automatic user account deactivation for more information on this.
Buttons on the edit screen
- Save - Save the current realm settings. A warning will be displayed if there are any problems.
- Edit...
- Groups in Realm - Go to the list of groups in this realm.
- Users in Realm - Go to the list of users in the realm.
- Profile Property Definitions - Go to the list of profile property definitions in this realm. See User profile for more details.
- Profile picture user link definition - Go the page which lets you chose the user profile picture user link definition.
- Reindex - Reindexes all users in this realm
Also See
- Automatic user account deactivation - Information on how to set up automatic account deactivation.
