› System › Additional settings › Logon and authentication › Federated security › Support for authentication without federated security

Support for authentication without federated security

TotalAgility supports manual logon as well as Windows authentication.

Manual logon

Manual login using username/password as defined in TotalAgility is supported in both TotalAgility Azure and on-premise.Figure displaying links between a client and TotalAgility Azure

Callout Description
One Client logs on to TotalAgility using credentials (username and password).

Requiring username/password authentication has the following disadvantages in TotalAgility Azure:

  • As TotalAgility maintains usernames and passwords, customers also expect support for retrieval of lost passwords; password expiry; lockout after several failed logins, and the rest.

  • Need to remove a user from TotalAgility if the user leaves the customer's company.

  • Does not support single sign-on; user needs to supply a username and password when logging onto TotalAgility.

Windows authentication

Figure displaying data-links used in Windows authentication

Callout Description
One Client logs on to domain (Windows Server AD) using the credentials (username and password).
Two Windows Server AD gets the Kerberos ticket for TotalAgility.
Three Windows Server AD submits the Kerberos ticket to TotalAgility via the Client.
Four TotalAgility uses the information in the ticket to verify the Client is authenticated.