Login Methods

UDMG provides the following login methods:

• Local database authentication
• LDAP
• Single Sign-On (SSO)

The available login methods for a user depend on the system configuration, on the selection of service and provider on the UDMG Admin UI login page, and the user login method.

For local authentication, the user can be configured with either Standard or Standard/Authenticator App (TOTP).

For SSO authentication, the user must exist on UDMG with the email value that is known by the SSO Identity Provider.

For LDAP authentication, it is possible that the user does not exist yet in UDMG. In that case, it will be created as read-only after the LDAP authentication and granted access. To acquire more privileges, the intervention of an administrator user will be needed.

Any attempt by a user to use either the Local or LDAP authentication with an invalid username or password will receive the following error: 

Invalid credentials.

Error during SSO authentication are reported either directly on the SSO Identity Provider login page or with the error

Authentication Error.

Standard Login

The UDMG Admin UI Login page displays automatically when you bring up the UDMG Admin UI system and browse to its URL.

The Standard login URL is: http(s)://<server:port>/auth/login (or simply, http(s)://<server:port>/).

All Local accounts and LDAP-authenticated accounts authenticate through this standard login page.
 

Changing Your Password

To change your password at any time after you have logged in:

Changing password is also possible with the following methods

• with the UDMG command line
• with the Users management page that is only accessible to users with the appropriate administrative access permission 

Single Sign-On Login

In case the Provider is a Single Sign-On authentication, then the username and password field are not shown and clicking on the next button will open the Sign In page from the identity provider.

Standard/Authenticator App (TOTP)

UDMG Admin UI supports the use of an Authenticator App for standard login accounts.

A user configured for Standard / Authenticator App (TOTP) as a Login Method must setup their UDMG account in their authenticator app during their initial login.

During the initial login, an enrollment page will be presented to the user assuming they authenticated successfully using their username and password:

You can switch to setup manually by clicking the Manual button:

Next, the user will be prompted to enter their Time-based one-time password (TOTP) to login to the UDMG Admin UI: 

Once the code is validated, the enrollment is completed and the user can proceed to the application by clicking on Go to dashboard

After the initial enrollment, you will only have to enter the Time-based one-time password (TOTP) after authenticated successfully using your username and password.

Once a user has successfully logged into the application using their Authenticator App two-factor authentication, a TOTP code will not be required to restore an expired session from the Session Expired login prompt.

Logging Out

To log out of your UDMG Admin UI session:

Exiting without Logging Out

As a best practice, we recommend that you always end your UDMG Admin UI session by logging out before closing the browser or navigating away from the user interface.

The session will be logged out after 5 minutes of inactivity.

User Sessions

To display a list of currently authenticated user sessions (logged in users):

For each logged in user, the User Sessions list provides the following columns of information: