← Back to plugin index

Administrators Configuration
Description
Configuration of administrators, i.e. authentication, authorization and management of administrators.
Type name
AdministratorsConfiguration
Class
com.airlock.iam.admin.application.configuration.administrators.AdministratorsConfiguration
May be used by
Adminapp
Properties
Authenticator (authenticator)
Description

Defines how administrators are authenticated interactively. If only authentication using SSO tickets is required, this property is optional.

Note that the Adminapp authentication UI only support username/password login. Configuring second factors or other authentication means will not work and users will not be able to login.

Attributes
Plugin-Link
Optional
Assignable plugins
Accepting Authenticator Active Directory Connector Airlock 2FA Authenticator Certificate Authenticator Certificate Token Authenticator Configuration-based Authenticator Credential-based Authenticator Selector Denying Authenticator Dummy Matrix Authenticator Dummy Polling Authenticator Dummy Two Step Authenticator Email Otp Authenticator Fallback Authenticator LDAP Connector LDAP Password Authenticator Lookup and Accept Authenticator MTAN/SMS Authenticator Main Authenticator Matrixcard Authenticator (TAN Challenge) Meta Authenticator NextGenPSD2 Certificate Authenticator OATH OTP Authenticator OAuth 2.0 Access Token Authenticator Password Authenticator RADIUS Authenticator SSO Credential Authenticator STET PSD2 Authenticator Selection Authenticator Static Authenticator Token Authenticator User-based Authenticator Selector
Password Service (passwordService)
Description
Password service used to change passwords by administrators.
Attributes
Plugin-Link
Optional
Assignable plugins
Accepting Password Service Active Directory Connector Composite Password Service Dummy Password Service HTTP Password Service LDAP Connector LDAP Password Authenticator Persister Password Service User-based Authenticator Selector User-based Password Service Selector
Password Policy (passwordPolicy)
Description
Defines a password policy that must be passed when the administrator chooses a new password.
Attributes
Plugin-Link
Optional
Assignable plugins
Active Directory Connector Active Directory Password Policy Customizable Password Policy Null Password Policy Simple Password Policy
SSO Ticket Authentication (ssoTicketAuthentication)
Description

If specified, ticket-based single sign-on (SSO) is enabled for the Adminapp: Externally authenticated administrators may access the Adminapp without additional login, provided they bring a valid SSO ticket. The ticket is passed to the Adminapp as URL parameter.

Attributes
Plugin-Link
Optional
Assignable plugins
Admin SSO Ticket Request Authentication
Administrators Management (administratorsManagement)
Description
Configures the management of administrators.
Attributes
Plugin-Link
Optional
Assignable plugins
Administrators Management
Username Transformation (usernameTransformers)
Description

Username transformation enables authentication with an alias name, by transforming the name entered into the login form to the internal user ID.

The username transformation configured here is only applied to the interactive username/password login.

Transformers can be chained, e,g. a first transformer could normalize the entered name, and the next transformer would then search for a user with a matching context-data field. A transformer can also signal that it already found the final user ID and that no further transformations should be performed.

Attributes
Plugin-List
Optional
Assignable plugins
Airlock 2FA Username Transformer Context Data Username Transformer Identity Username Transformer Lowercase Transformer Primary Key Lookup Regex Username Transformer Template-based Username Transformer Token Data Username Transformer Uppercase Transformer
YAML Template (with default values) 

type: AdministratorsConfiguration
id: AdministratorsConfiguration-xxxxxx
displayName: 
comment: 
properties:
  administratorsManagement:
  authenticator:
  passwordPolicy:
  passwordService:
  ssoTicketAuthentication:
  usernameTransformers: