Change User Authentication Settings

This topic shows you how to change user sign in preferences, session timeout settings and how user names are displayed in the banner for logged-in users.

Change sign in preferences for all users

You can change how users sign in to Commander:

  • By allowing them to enter the domain their user account is associated with.

    OR

  • By automatically populating the domain field that their user account is associated with.

These preferences are optional and are designed for use if the same user name exists on multiple LDAP servers or if you don't want users to type in the domain name every time they sign in.

Access:

Configuration > Identity and Access

Available to:

Commander Role of Superuser

  1. Click the Authentication tab.
  2. In the Sign In Preferences section, click Edit.
  3. To display the domain field on the sign in screen, enable Display Domain Field.
  4. To automatically display the name of the default domain on the sign in screen, enter the domain in Default Domain.
  5. Click OK.

To remove any display of the domain name or the domain field in the sign in screen for Commander, remove the values in this dialog and click OK.

Change the session timeout period

The session timeout for Commander users and for Service Portal users is used to control how long Commander is available during a period of inactivity before it automatically logs a user off. As long as a user is working with the system within the period of time specified, Commander doesn't automatically log off the user.

The session timeout period is a system-wide timeout and affects all users.

Access:

Configuration > Identity and Access

Available to:

Commander Role of Superuser

  1. Click the Authentication tab.
  2. In the Session Preferences section, click Edit.
  3. In the Session Preferences dialog, enter a new period of time as required for Commander and for the Service Portal.
  4. Select the unit (seconds, minutes, or hours) from the menu.
  5. Click OK.

If you're using SAML SSO, you'll need to configure Commander session timeouts and the IdP session timeouts to work together. See Configure SAML SSO for more information.

Change the display format for user accounts

You can configure what account information is displayed for a session user. The following options are available:

  • Username
  • First name and last name
  • Last name and first name
  • Email address

The session information is displayed at the top-right corner of the Commander menu.

Access:

Configuration > Identity and Access

Available to:

Commander Role of Superuser

  1. Click the Authentication tab.
  2. In the Session Preferences section, click Edit.
  3. In the Session Preferences dialog, for User Display Format, select the format you want to use and click OK.