Users and User Groups
Authentication by PIN
When an end user accesses the ETV Portal Server via a STB, the Portal Server takes the following steps to authorize users.
1.It determines if there is Authentication/Authorization information associated with the Host Name of the STB. If so, based on the STB Host Name, the ETV Portal Server will present the STB with the information appropriate to its privileges. Note that the ETV Portal Server uses the least restrictive settings when providing access to the system.
2.If there is no Authentication/Authorization information associated with the Host Name of the STB, the user will be prompted for a PIN. A PIN is a
3.Once the user is authenticated, the ETV Portal Server will check the User Groups and/ or Resource Groups that the User is associated with and the privileges associated with those groups.
4.After checking the Groups privileges, the ETV Portal Server will check for any individual user privileges above the group privileges.
5.The user will be presented with the information appropriate to their privileges. Note that the ETV Portal Server uses the least restrictive settings when providing access to the system.
If Authentication and Authorization is enabled, but the STB is not defined in the system, then Access Management works based on a User PIN. This PIN is defined on a per user (not per STB) basis, so Users need to be setup in the system for this to work. When the user accesses the ETV Portal Server through the STB, they will be prompted for their PIN. The user simply enters the PIN with the remote control or the wireless keyboard, and can then access the video for which they have privilege. This implementation is appropriate for environments where multiple users with different privileges will be accessing the same STB. An example of this would be a shared classroom, where multiple teachers are accessing the STB at different times.
Authentication by Host Name or IP Address
The ETV Portal Server determines the content that the STB can view based on its IP Address or Host Name. No user interaction is required. The user simply turns on the STB, and only the content that the STB user can view displays. This implementation is similar to a Cable Television setup – for example, if the plan does not include HBO, then that channel cannot be viewed. This implementation is easiest from the end user perspective because end users do not have to remember user names or PINs. This implementation is appropriate for environments where multiple people can access the same STB.
The following steps provide best practices for properly configuring the Access Control section of the ETV Portal Server.
ETV Portal Server Admin Guide | 91 |
