Skip to main content

Application access tree

Description

Soffid allows administrator users to create new entry points to the information systems. These entry points can be URLs or applications that can give access to information systems that have been registered in Soffid. These entry points are managed in a tree structure that allows to create new menus and new application access.

Each application entry point can have a single sign-on rules. Those roles are fully explained at SSO reference guide &&TODO&& Esta en confluence, ¿hay que mantener?

CONFLUENCE: ????After logging on a managed workstation, the system will apply such restrictions and will update the Windows or Linux start menu.

Each application entry point will have different execution methods for full managed workstation, loosely managed workstation, or external devices. Each of them can be a web browser URL or a javascript piece.

Screen overview

&&TODO&&

  1. Information system
  2. User
  3. Group
  4. Role
  5. Account

Standard attributes

Basics

  • Menu: (yes|no) when menu is Yes, this application will be like a folder to contain and organize other applications.
  • Name: application identifier name.
  • Code: application code.
  • Information System: asset or application, from a functional point of view, on which the permissions are granted or revoked. Soffid will connect to this information system to validate credentials and permissions. ¿Es esto así?
  • System: information storage system from a technical point of view (active directory, database, CSV, ...).
  • Public access: when it is Yes, this application will be displayed as public at the self-service portal of all users.
  • Visible without permissions: when it Yes, this application will be displayed at the self-service portal, but only users with permissions will be allowed to connect.
  • Icon: application identification icon.

Authorizations

Allows to grant access level permissions to users, groups, roles or accounts. 

&&TODO&& Al asignar los permisos, en la pestaña de access level comprobar si se ha quitado o cambiado la etiqueta de Network

To give an authorization it is necessary, first of all to select the grantee type, then to choose the user, group, role or account, and finally choose the access level. The access levelslevel optionsalows availabletwo Manage and Execute ¿options:

 

     

  • Manage: allows to update the entry point.
  • Execute:
    • when the entry point has selected the option public access to NO, only users with the assigned access level as execute, could execute that entry point.
    • when the entry point has seleccted the option public access to YES, all users could execute that entry point.

Executions

Allows Adminsitrator users to configure the entry point access. It is only available to entry points with option Menu does not selected

There are tree options to configure the executions. Administrator users can configure one or more:

  • Running from Intranet: this entry applies to hosts located in a network flagged as internal.
  • Running from Extranet: this entry applies to hosts located in a network NOT flagged as internal.
  • Running on the Internet: this entry applies to hosts located in a unknown network.

For each one execution option it is possible to configure the following parameters: 

  • Enabled: if the option is available to configure.
  • Type: access connection type.
  • Content: ¿que permite cada opcion? &&TODO&&
      • text/html: a URL to access to the application.
      • x-application/x-mazinger-script
      • Recorded session
      • Web Single Sign On

    ESSO

    &&TODO&&

    Actions

    Application query

     

    QueryAllows to query users through different search systems, Quick, Basic and Advanced.
    Add newAllows to add a new entry point. To add a new entry point it is necessary to fill in the required fields.
    Create new entryAllows to add a new entry point within the hierarchy.

    Application detail

    Apply changesAllow to create a new entry point or to update the data of a specific entry point.
    DeleteAllow to remove a specific entry point.
    UndoAllows to quit without applying any changes.
    Authorizations
    Add or remove columns
    		Allows to show and hide columns in the table.
    Add newAllows to add a new authotization to the group. 
    RemoveAllows to remove one or more authorizations from the entry point. 
    ImportAllows to upload a CSV file with the información about authorizations to add update or remove that.
    Download CSV fileAllows to download a CSV file with all the information about authorizations. 
    Executions
      
      
    ESO
      
      

     

    Back to top