When you log in to RulePoint, RulePoint authenticates your credentials by using the local or remote authentication provider. User access is further based on the configured access control list for each object and the groups to which you have assigned the user in the authentication provider.
You can use more than one type of authentication in RulePoint. Consider the following options for configuring authentication in RulePoint:
Local authentication in RulePoint database
When you log in to RulePoint as a local user, RulePoint authenticates your user name and password against the user accounts.
Remote authentication using Lightweight Directory Access Protocol (LDAP) Server
When you log in to RulePoint as an LDAP user, RulePoint passes your user name and password to the external directory service for authentication. The directory service can be Open LDAP Directory Service or the Microsoft Active Directory.
By default, RulePoint uses local authentication. If you use the default RulePoint database for authentication, two roles, Role_User and Role_Admin, are available. For creating additional user roles in your implementation, you must use either a local authentication server or a remote authentication provider. If you use an external authentication provider, RulePoint will be as secure as the external authentication server. Verify that you secure the authentication server.