Security and User Management Changes
New Default for Credential Storage in Client-Side Active Directory Authentication (UIG-9349)
The client-side Active Directory Authentication feature now generates encryption keys that do not require users to re-enter their old Active Directory password upon a password change. This is the new default behavior. The cipher version determines the algorithm used when encrypting stored credentials. Valid cipher version values are 1 or 2. Version 1, the previous default, requires the re-encryption of stored credentials when a user’s Windows password changes. Version 2, the new default behavior, does not require the re-encryption when a user’s Windows password changes. The cipher version is specified in the client session configuration file (client-session.xml). The default setting is now as follows:
<QAD.Authentication.ActiveDirectory.CipherVersion>2</QAD.Authentication.ActiveDirectory.CipherVersion>
User Synchronization (Cloud Deployments Only)
With user synchronization, QAD Enterprise Applications – Enterprise Edition user accounts can be synchronized with a corporate LDAP directory (Active Directory). The configuration for user synchronization includes the use of a DSML (Directory Services Markup Language) gateway for LDAP communication between QAD Enterprise Applications and a corporate LDAP directory. In March 2015, this feature is only available in Cloud deployments and requires QRA. For more information, contact QAD Services.
LDAP Authentication (Cloud Deployments Only)
Users can log in to QAD Enterprise Applications with their existing corporate credentials. Configuration with the new LDAP Instance Maintenance and also User Maintenance settings. In March 2015, this feature is only available in Cloud deployments and requires QRA. For more information, contact QAD Services.
Email Login (Cloud Deployments Only)
Users can log in with either their user ID or email address, using the same password they use for their other corporate applications. In March 2015, this feature is only available in Cloud deployments and requires QRA. For more information, contact QAD Services.
QRA Session Management (Cloud Deployments Only)
The QAD Reference Architecture (QRA) is a new module deployment framework within QAD Enterprise Applications – Enterprise Edition. QRA is required for user synchronization and additional features. QRA session management provides the ability to enable or disable QRA in QAD Enterprise Applications – Enterprise Edition. In March 2015, QRA (and QRA session management) are only available in Cloud deployments. For more information, contact QAD Services.