Main Settings (Remote Authentication Source)

To learn about authentication sources, click here.

To specify the category, default profile, and group folder for this authentication source:

1. In the Authentication Source Category text box, type the prefix you want to use to distinguish the users and groups imported from this domain. For example, if you enter myDomain, each user name and each group name will be prefixed by the string myDomain; for example, myUser becomes myDomain\myUser and myGroup becomes myDomain\myGroup.
   
   Generally, you can set the category to any value you want, but there are a few important considerations:

• Do not include spaces in the prefix.

• After you create this authentication source you cannot change the category value.

• If you are using Windows Integrated Authentication (WIA) as your single sign-on (SSO) authentication provider, your authentication source category must match the domain name.

• You might want the authentication source category to match the domain name if you are going to import security information. Some content crawlers have the ability to import security information with the imported content, making portal security much easier to maintain. For this to work, the users with access to the imported content need to correspond to portal users, as specified in the Global ACL Sync Map. If the authentication source category matches the name of the source domain, this correspondence is automatic.

• Multiple authentication sources can use the same category. However, because the prefix is prepended to the user and group names, you need to be certain that the domains involved do not have different users or groups with the same name. That is, if a LizaR user exists on one domain, and a LizaR user exists on another domain, they must be the same user because only one user will be created.

2. Under Default Profiles, specify which default profiles should be applied to users imported by this authentication source. A default profile includes portlets, portlet preferences, My Pages, and personalization settings. By assigning a default profile to the imported users, you can control what users see when they first log in to your portal. After that, users can further personalize their views of the portal.
   
   The default profile drop-down list is populated with the users in the default profiles folder. To learn how to create default profiles, see Edit Default Profiles.
   
   If you want to apply the same default profile to all users imported by this authentication source, you can specify the following settings when you create the authentication source:

1. In the Default Profile drop-down list, choose the default profile you want to apply to the users imported by this authentication source.

2. By default, users imported by this authentication source are stored in the same folder that stores the authentication source. If you want to change the folder, under Target Folder, click Browse; then, in the Change Folder dialog box, select a new folder and click OK.
   
   If you want to display an experience definition interface to the imported users when they log in, choose a folder to which the experience definition has been applied or apply the experience definition to the chosen folder before you import users.

If you want to apply different default profiles to the users in some groups:

1. Perform a Partial Users Synchronization to import all the groups.

2. Return to this page in the editor.

3. Click Add Group; then, in the Add Group dialog box, select the groups to which you want to apply different default profiles and click OK.
   
   Note: To edit a group, click the group name.

4. For each group, specify which default profile should be applied to the associated users; in the Default Profile drop-down list, choose the default profile.

5. By default, users imported by this authentication source are stored in the same folder that stores the authentication source. If you want to change a folder for a group, under Target Folder, click Browse; then, in the Change Folder dialog box, select a new folder and click OK.
   
   If you want to display an experience definition interface to the imported users when they log in, choose a folder to which the experience definition has been applied or apply the experience definition to the chosen folder before you import users.

6. If a user is a member of more than one group in this list, the uppermost default profile is applied. If necessary, move groups up or down in the list.

• To move a group to the top of this list, click .
• To move a group up one space in this list, click .
• To move a group down one space in this list, click .

• To move a group to the bottom of this list, click .

3. By default, groups imported by this authentication source are stored in the same folder that stores the authentication source. If you want to change the folder, under New Groups, click Browse; then, in the Change Folder dialog box, select a new folder and click OK.

• To display the page associated with this help topic:

1. Click Administration.
2. Open the Authentication Source Editor:
• To create a new remote authentication source:
1. Open an administrative folder.
2. In the Create Object menu, click Authentication Source - Remote.
3. In the Choose Web Service dialog box, select the appropriate Web service and click OK.
• To edit an existing remote authentication source:
1. Navigate to the remote authentication source you want to edit.
2. Click the remote authentication source name.