Processing End-user Credentials

Each connection profile with authenticated access requires the assignment of one or more Active Directory objects which define the users that can see and execute it.

z/Scope Anyhwhere implements a mapping mechanism to transform end-user credentials to AD objects. Only connectin profiles that match these AD objects will be granted access to the end-user.

When you enable an authentication method, you must add the mapping rules that will allow you to link the user ID with an AD object. This is done by specifying an external user ID mask and its linked AD objects.

Depending on the selected authentication method, z/Scope Anywhere uses the identification provided provided by the user to scan the mapping rule list and obtains the associated AD objects. If the matching process returns one or more AD objects, all applications with the same AD object are enabled to be seen and accessed by the end-user.

Read More: