QAD 2017 Enterprise Edition > User Guides > Security Administration > Security Overview > Sign-in Security
  
Sign-in Security
The following types of security are enforced at sign in:
Sign-in security determines whether a user can sign in to an application session based on their user ID and password. This level of security is always active, although how it is implemented depends on settings in Security Control.
For example, system administrators can choose to allow valid users to sign in to the QAD application based on operating system-level access. See OS-Based Sign-in Security for details.
Note: You also should consider additional access security options at the operating-system and Progress levels. See Operating System and Progress Security for details.
Domain/entity security limits individual user access to the domains and entities identified in User Domain/Entity Access Maintain (36.3.4). If using the .NET UI, users can open other workspaces in order to access domains and entities for which they are authorized.
These two types of security are closely related and work together to ensure that users can only access the business areas that they have been authorized.