diff options
author | Aaron Tan <jangsutsr@gmail.com> | 2017-06-19 22:57:12 +0200 |
---|---|---|
committer | Aaron Tan <jangsutsr@gmail.com> | 2017-06-20 18:17:13 +0200 |
commit | 70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8 (patch) | |
tree | ec8a88636f55498e2d92ba8253e3eaaa08912577 /docs/auth | |
parent | Merge pull request #6609 from jlmitch5/newCredOnJT (diff) | |
download | awx-70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8.tar.xz awx-70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8.zip |
Expand scope of enterprise user types.
Diffstat (limited to 'docs/auth')
-rw-r--r-- | docs/auth/README.md | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/auth/README.md b/docs/auth/README.md index 67bcec8e0e..3737bf1823 100644 --- a/docs/auth/README.md +++ b/docs/auth/README.md @@ -16,9 +16,9 @@ On the other hand, the rest of authentication methods use the same types of logi Tower will try authenticating against each enabled authentication method *in the specified order*, meaning if the same username and password is valid in multiple enabled auth methods (For example, both LDAP and TACACS+), Tower will only use the first positive match (In the above example, log a user in via LDAP and skip TACACS+). ## Notes: -* RADIUS users and TACACS+ users are categorized as 'Enterprise' users. The following rules apply to Enterprise users: +* SAML users, RADIUS users and TACACS+ users are categorized as 'Enterprise' users. The following rules apply to Enterprise users: * Enterprise users can only be created via the first successful login attempt from remote authentication backend. * Enterprise users cannot be created/authenticated if non-enterprise users with the same name has already been created in Tower. * Tower passwords of Enterprise users should always be empty and cannot be set by any user if there are enterprise backends enabled. - * If enterprise backends (RADIUS and TACACS+ for now) are disabled, an Enterprise user can be converted to a normal Tower user by setting password field. But this operation is irreversible (The converted Tower user can no longer be treated as Enterprise user) + * If enterprise backends are disabled, an Enterprise user can be converted to a normal Tower user by setting password field. But this operation is irreversible (The converted Tower user can no longer be treated as Enterprise user) |