Authentication

Authentication requires users to identify themselves to the IBM TRIRIGA Application Platform and then do something else to prove that they really are who they claim to be.

Setting up authentication for a user involves two steps:

Create a record that describes the user.
Create an embedded My Profile record that describes the user's user ID and how the user interacts with the IBM TRIRIGA Application Platform.

The typical procedure for creating a record that describes a user is a manual procedure. Navigate to Portfolio > People. Here you can create triPeople records by using the Employee, Consultant, or External Contact forms. You also may configure other types of records to describe users.

The forms for these records have a number of tabs. After you have filled in the required fields on the General tab, you are ready to fill in the details of the My Profile record that describes the user ID to the IBM TRIRIGA Application Platform and the way the user interacts with the platform.

You can create the My Profile record indirectly by going to the Profile tab of the record you just created. The fields on the Profile tab have these meanings:

User Name

This is the user ID that the user uses to log in to IBM® TRIRIGA®. This field must be filled in even though the form does not indicate that it is required.

Active TRIRIGA User?

Select this check box if you want the user to be able to log in.

Home Page

Defines the main window, or portal, the user sees when the user first signs into IBM TRIRIGA when at the Company Level. This also displays whenever the user clicks the Home menu item. If this value is blank, IBM TRIRIGA renders a default portal. See the IBM TRIRIGA Application Platform: User Experience User Guide for more information about portals.

Menu

A navigation collection that defines the structure and content of the menu bar at the top of page when at the Company Level. See the IBM TRIRIGA Application Platform: User Experience User Guide for more information about navigation collections and menus.

Project Home Page

Similar to Home Page, but only applies when the user is working in a Project context.

Project Menu

Similar to Menu, but only applies when the user is working in a Project context.

Sitemap?

If this check box is selected, a Sitemap link is available for this user. The sitemap displays a site index that contains all of the selectable navigation items based on the user's menu. Note that navigation items can be configured to only appear on the sitemap, and hence would be unavailable to users that do not have the Sitemap check box selected. See the IBM TRIRIGA Application Platform: User Experience User Guide for more information about sitemap and navigation items.

Disable Company Level?

Normally you leave this cleared. If this check box is selected, the Clear Project button is disabled for the user. This works in conjunction with application features that populate the last project used. The project selector enables the user to move between projects, but without the Clear Project button, the user cannot exit a project and go to the Company Level.

User Language

The value of this field is the language that the user prefers to use, such as US English, Spanish, French. The value of this field determines which set of labels and other text the user sees.

The list of languages that you can choose from in this field is determined by a list named Language.

For more information, see the IBM TRIRIGA Application Platform: Globalization User Guide.

Currency

Use this field to specify the default currency for the user. For more information, see the IBM TRIRIGA Application Platform: Globalization User Guide.

Time Zone

The time zone that the user is normally in. If blank, the time zone is from the time zone in which the application server is running.

Delegate To

The purpose of this field is to allow another user to handle this user's approval action items when this user is not able to do it. If this field has a value, it is the user allowed to approve action items on behalf of this user.

Approval Amount

The maximum amount that this user is authorized to approve on a single transaction.

Enable Accessibility Mode

When selected, metric reports are displayed in tabular format by default. The user can switch to chart format.

Also when selected, schedule assumptions in a capital project form are shown in a separate Schedule Assumptions tab instead of in the Schedule tab.

Enable Skip Navigation

When selected, the Skip Navigation link is displayed at the top of portals and forms. After the user tabs to the Skip Navigation link and presses Enter, the user is taken directly to the main content area.

Group Details

The groups the user is in.

License Details

The licenses the user has.

Having filled in the fields of the Profile tab, you are ready to create the user's My Profile record by clicking the Activate action. After the My Profile record is created, the user can log in to IBM TRIRIGA.

By default, the platform logs successful and failed logins and user account changes in the security.log file. You can turn off this logging by editing the log4j.xml file located in the <IBM TRIRIGA installation>\config folder (for example, C:\Tririga\config\log4j.xml).

Being able to log in is not useful by itself. If no licenses are granted to a user, the user cannot access any application features or tools provided by the platform. User IDs that have not been granted any licenses are not allowed to log in.

Having licenses without membership in a group is not useful either. In order to be able to access any record, a user must have permission to do so. To perform an action on a record, a user must have permission to perform the action on the record. A user gets permissions by being a member of a group that has the permissions.

Other triPeople business objects

If using a record created from a triPeople business object is not appropriate for your application, you can create and use another business object in the triPeople module.

The business object must have an association with the My Profile business object. The association must be named Associated To on both ends.

The form should have a Profile tab similar to the one in the Consultant, Employee, or External Contact form. The Profile tab should have an action on it that allows a My Profile record to be created that describes the user's user ID.

The easiest way to accomplish these things is to copy what already exists. Create the new business object by copying the triPeople business object. Copy the corresponding form to create the new form.