Configuring authentication for Datacap

You can configure Datacap to use Datacap authentication or to use one of the external authentication methods.

About this task

The authentication system that you choose affects whether you set up and maintain individual users or groups in your Datacap applications. The following five authentication systems are supported:
  • Datacap authentication (referred to as TMA)
  • Windows Active Directory (referred to as ADSI)
  • Windows Active Directory Lightweight Directory Services (referred to as ADLDS)
  • Lightweight Directory Access Protocol (referred to as LDAP)
  • Low-Level Lightweight Directory Access Protocol (referred to as LLLDAP)
    Important: For Datacap Navigator authentication, you can use ADSI (password required), ADLDS, LDAP (password required), and LLLDAP. Datacap Navigator does not support LDAP and ADSI authentication using Windows account credentials.

For a planning overview related to domains, Windows accounts, authentication systems, Datacap users, groups, stations, and databases, see Planning your Datacap system.

  • Datacap Server service settings
    The Datacap Server runs as a Windows service that you can start, pause, or stop in the Datacap Server Manager window. When you open the Datacap Server Manager dialog window, you can also configure authentication, database access, batch processing, and the logging level.
  • TMA authentication system
    The Datacap TMA authentication system supports both user and group authentication. You can select the TMA option from the Datacap Server Manager list of authentication systems. When you select the TMA authentication system option, the group names, user names, and passwords that you set up in the Datacap applications are used for authentication. You can set up user authentication credentials for the Maintenance Manager application, Rulerunner service, Datacap Web Client Upload service, and Datacap web services.
  • Active Directory ADSI and LDAP authentication systems
    The Active Directory ADSI and LDAP systems authenticate at the group level. You can select the ADSI or LDAP authentication system option from the Datacap Server Manager list of authentication systems. When you select the ADSI or LDAP authentication option, the credentials from the Windows account are used for authentication. For Active Directory domains that have a mutual trust relationship, ADSI and LDAP systems support the authentication of users in multiple domains.
  • ADLDS and LLLDAP authentication systems
    When the ADLDS or LLLDAP authentication system is used, the user names and passwords that are entered on Datacap login windows or passed to Datacap by background services and processes are used for authentication.
  • LLLDAP group authentication
    In the Datacap Server Manager, you can select LLLDAP as your group authentication system. When you select LLLDAP as your group authentication system, you must set up the Authentication path template with customized directory configuration properties.
  • Configuring the Datacap Server service to use an external authentication system
    You can configure the Datacap Server service for external authentication. When you open the Datacap Server Manager, you can select the ADSI, ADLDS, LDAP, or LLLDAP authentication method.
  • Authenticating Datacap Web Client users with IBM Security Access Manager
    Datacap Web can decode WebSEAL directed headers and use the information that is provided in the headers to authenticate the Datacap user. The extracted identity information is used to retrieve the LDAP group information for that user by using an LDAP directory bind. Complete the following steps to authenticate users who are authenticated in Security Access Manager.
  • Configuring single sign-on (SSO) for Datacap Navigator
    You can configure single sign-on (SSO) for Datacap Navigator by using IBM Security Access Manager, SPNEGO/Kerberos, or container-managed authentication.
Parent topic: Datacap installation and configuration in a client/server environment
Related concepts:
Datacap Web Services authentication
Related tasks:
Planning your Datacap system