Administration Authentication for InGenius Connector Enterprise

Transcription

1 Administration Authentication for InGenius Connector Enterprise Version Contact: x3000 TRADEMARKS InGenius, InGenius Connector Enterprise and the InGenius logo are trademarks of InGenius Software Inc. Windows and Microsoft are trademarks of Microsoft Corporation. Salesforce.com is trademark of Salesforce.com. Other product names mentioned in this document may be trademarks of their respective companies and are hereby acknowledged. 1

2 TABLE OF CONTENTS 1 Administration Authentication Overview Integrated Windows Authentication Administrative Active Directory Group Configuring ICE to use Integrated Windows Authentication Additional Administration Roles Basic Authentication Configuring ICE to use Integrated Windows Authentication Additional Administration Roles Additional Administrators

3 1 Administration Authentication Overview The Administration Authentication within the InGenius Connector Enterprise Server gives Administrative Users access to the Runtime Administration tool of the InGenius Connector Enterprise Server. There are two types of Admin Authentication: 1. Integrated Windows Authentication (Enhanced Authentication) 2. Basic Authentication Either can be configured through the InGenius Connector Enterprise Server 3

4 2 Integrated Windows Authentication 2.1 Administrative Active Directory Group In order to be able to use Integrated Windows Authentication to access the Runtime Administration Tool of the InGenius Connector Enterprise server, create an Active Directory Group entitled ICERuntimeAdmins. Assign anyone maintaining the InGenius Connector Enterprise Server to this group. Members of this group will have a full administrative role over the Runtime Administration Tool. You may wish to create other Active Directory Groups to allow other users limited access to the Runtime Administration Tool (see the section on Additional Administration Roles for more details). 2.2 Configuring ICE to use Integrated Windows Authentication To use Integrated Windows Authentication, within the ICE Configuration Tool 1. Go to the Configuration, General tab. 2. In the Run-Time Administration Access section, select the Integrated Windows Authentication radio button. 3. Enter the name of your Active Directory Group; ICERuntimeAdmins by default. 4. If you want users on this local machine to also be required to authenticate when accessing the Run Time Administration tool, check Require Authentication for Local Machine Connections. If any members of this Active Directory Group ICERuntimeAdmins log into the Run Time Administration Tool, they will have a Full Administrative Role over all features of the tool. 4

5 2.3 Additional Administration Roles If any members of this Active Directory Group ICERuntimeAdmins log into the Run Time Administration Tool, they will have a Full Administrative Role over all features of the tool. The features include: 1. Configuration and diagnostics 2. Zone assignment (if enabled in the ICE Configuration Tool) 3. CRM a. Salesforce: Call center profiles and license assignment b. MSCRM: CTI profiles and license assignment You can however create Administrative Roles that can have limited permissions over the features of the Run Time Administration Tool. 1. Create a new Active Directory Group for each role you wish to create and add respective members to this group. (For Example: ICERole_CRMAdmin). 2. Log into the Run Time Admin and an ICERuntimeAdmins administrator. 3. Select the Administrator Role Management tab. 4. Select Create Role. 5. This new role needs to be named exactly the same as the AD group; ICERole_CRMAdmin 6. Edit the role to add the permissions you wish this role to have. 7. Repeat the above steps for each role you wish to create. When an administrator within the new AD group logs into the Run Time Administration Tool, they will only see the features that they have permission to work on. 5

6 3 Basic Authentication 3.1 Configuring ICE to use Integrated Windows Authentication To use Integrated Windows Authentication, within the ICE Configuration Tool 1. Go to the Configuration, General tab. 2. In the Run-Time Administration Access section, select the Basic Authentication radio button. 3. Press Change Password to set a master password. 4. If you want users on this local machine to also be required to authenticate when accessing the Run Time Administration tool, check Require Authentication for Local Machine Connections. If anyone logs into the Run Time Administration Tool using the user name admin and this master password, they will have a Full Administrative Role over all features of the tool. 6

7 3.2 Additional Administration Roles If anyone logs into the Run Time Administration Tool using the user name admin and the master password, they will have a Full Administrative Role over all features of the tool. The features include: 1. Configuration and diagnostics 2. Zone assignment (if enabled in the ICE Configuration Tool) 3. CRM a. Salesforce: Call center profiles and license assignment b. MSCRM: CTI profiles and license assignment You can however create Administrative Roles that can have limited permissions over the features of the Run Time Administration Tool. 1. Log into the Run Time Admin using the user name admin and the master password. 2. Select the Administrator Role Management tab. 3. Select Create Role and give this new role a name. 4. Edit the role to add the permissions you wish this role to have. 5. Repeat the above steps for each role you wish to create. 7

8 3.3 Additional Administrators Once you ve created Administrative Roles, you need to add Administrators. 1. Log into the Run Time Admin using the user name admin and the master password. 2. Select the Manage Runtime Administrators tab. 3. Select Create Admin and give this new administrator a name. 4. The administrator will be created with a temporary password which the administrator must change the first time they log in. (Note: Logged in as Admin you can reset an administrator s password should they forget). 5. Edit the administrator to add the role you wish this administrator to have. 6. Repeat the above steps for each administrator you wish to create. 8