Accounts: Manual, LDAP/AD, or SSO/SAML

Goal: Import or create user accounts. Complete either the Manual or LDAP/SOO configuration.

Manual (User List)
Navigate to Admin > Accounts, click the “+ Account” button, and complete the form.

Manual accounts are great for testing user access or providing a service account. Take note of the checkboxes by which you want this user to access DCT. 

When you have specified all required values, select the “Create Account” button. By default, this user will have no permissions.

LDAP/Active Directory or SSO/SAML (3rd Party Service)

Navigate to Admin > Authentication, click “Edit” for either LDAP/AD or SSO/SAML, and complete the form. Ensure “Auto-create Users` is enabled. It can be disabled at any time.

If you need guidance on how to configure, follow the directions here:

• LDAP/AD Directions

• SSO/SAML Directions

Once configured, Accounts will be automatically created when a user successfully logs in. 

This is functionally different from the old Engine model. Previously, the Account was created manually before they could log in.

Recommended: LDAP/Active Directory Domains

It is highly recommended that we also configure group membership during this stage. By defining the metadata attributes in the option Domain fields, DCT can automatically assign users to Access Groups. If configured correctly, you will see an automatically generated login_groups tag on recently logged-in accounts. If an Account does not have the tag, then (a) the Domain configuration is invalid, or (b) they should re-login. The login_groups tag is the only tag that cannot be specified on an Account manually. 

LDAP/Active Directory Domain Groups Directions

Example Account with the login_groups tag. 

Please test these new accounts out by logging in on another browser. By default, these accounts will not have any permissions and not see anything. In the following steps, we will give them access. In addition, if configured, we’ll take advantage of login_groups or a custom tag.