System setup

Options for user authentication

Options for user authentication

To set up your BIS system, you need to clarify with SEEBURGER how the authentication mode for your iPaaS users should be working. SEEBURGER supports two options:

  • Authentication via User Management Service (UMS)

  • SAML authentication

User Management Service (UMS)

The User Management Service (UMS) is a SEEBURGER app for managing the users of your BIS system, their user accounts, and rights.

Note: Only administrators can access the User Management Service (UMS).

The Change Manager of your company will get administrator rights for UMS and can invite futher users. Administrators can assign rights to new users, for example assign rights for more administrators or combine user rights in a different way.

    The following standard user groups are possible in the Cloud Integration Managed Service:

  • IAM User (global): administrator for identity (user) and access management

  • Message Tracking User: only permissions for the app Message Tracking

If you have specific requirements, customized groups for these rights can also be created.

You can switch to using SAML at any time by making a change request at SEEBURGER to configure the SAML authentication.

> Making a change request

SAML authentication

SAML is a method for single sign-on authentication. In this case, the BIS Portal needs to be connected to your company portal. After this is set up, you just need to log in to your company account, and you can access the BIS Portal.

Within SAML, an Identity Provider (IDP) verifies if you have successfully logged in to your company account, and are allowed to access the BIS Portal.

Note: If you would like to use SAML as your login method, you can make a change request.

> Making a change request

You can find further information on SAML as an SSO solution on our SEEBURGER blog:

> The Evolution of Password Security: From the Need for Many Passwords to the Integration of SAML as an SSO Solution