Custom Authentication Settings

The Custom Authentication tab appears when you select Single Sign-On (SSO). In the Custom Authentication tab, you can customize authentication settings or configure Smart Card authentication.

A Smart Card is a secure token carrier that contains X.509 v3 certificates. Smart Card authentication is a secure and reliable authentication method that allows users who have a current Smart Card (containing valid certificates and identity information) to gain access to a Smart Card-enabled SBM system once the proper PIN is provided.

Note: Smart Card users log in by selecting a certificate with their PIN; there is no need to enter an SBM password when logging in via Smart Card authentication. However, if SBM is configured to authenticate transitions or require electronic signatures, Smart Card users must create an Smart Card password to complete transition authentication requests. For more information, see "Overriding Authentication Options for Transitions" in the SBM Application Administrator Guide.

To start configuring custom authentication settings, select the context provider you want to use:

Application Engine
Select Application Engine as the context provider if your users are in SBM.
Other
Select Other as the context provider if your user accounts are stored in an external application that can use SBM Single Sign-On (SSO).

For example, if you want users in Dimensions CM to authenticate against LDAP using SBM's Single Sign-On (SSO) engine, select Other as the context provider and add an LDAP authenticator that points to the LDAP store that contains your Dimensions CM users.

If you want to override the default authentication settings, select Enable authenticators and identity transformers and configure authenticators and identity transformers. Note that this option is selected by default when you select the Smart Card Login for browser authentication on the General tab.

Refer to the following sections for help with customizing authenticators and identity transformers.