Cisco Systems 5.2.x Understand the Requirement to Authenticate Users, IdP-specific login screen

Chapter 6 Authentication and Federated Identity

Concepts

Understand the Requirement to Authenticate Users

Although Cisco DMS always authenticates users, we support three authentication methods.

￿

￿￿￿￿￿

￿￿￿￿￿

￿￿￿￿￿￿￿￿￿

•Embedded authentication is completely native to Cisco DMS. It does not depend on any external servers.

•LDAP authentication causes Cisco DMS products to rely on one — and only one — Microsoft Active Directory server and a Microsoft Internet Information Server (IIS). Thus, setup and operation with this method are more complex than with embedded authentication.

•NEW IN CISCO DMS 5.2.3 — Federation mode — also known as single sign-on (SSO) causes Cisco DMS products to rely on a SAML 2.0-compliantIdP in combination with a Microsoft Active Directory server and IIS. Thus, setup and operation with this method are more complex than with LDAP authentication.

Note You must choose one of these methods. The method that you use determines which login screen your users will see.

Tip	•	After a user session times out, we prompt the affected user to log in twice.
	•	An unresponsive Active Directory server can hang a login prompt for 20 minutes without any error message.

EMBEDDED MODE LDAP MODE FEDERATION (SSO) MODE 1

IdP-specific login screen

(NEW IN CISCO DMS 5.2.3)

1. When any of your federation servers uses a self-signed certificate, we show your users two SSL warnings during login.

Related Topics

•LDAP and Active Directory Concepts, page 6-10

•Federated Identity and Single Sign-on (SSO) Concepts, page 6-17

User Guide for Cisco Digital Media Manager 5.2.x

OL-15762-03 6-9