1.6		Using Windows Authentication	install admin
8		People and Permissions	admin
8.1		Users	admin
8.2		Groups	admin
8.3		Permissions	admin
8.4		Active Directory Integration and Windows Authentication	admin
10.10.2		Users & Security	admin
10.10.2.1		User Management	admin
10.10.2.2		Global and Project Groups	admin
10.10.2.3		Working with Global Groups	admin
10.10.2.4		Working with Project Groups	admin
10.10.2.5		Available Permissions	admin
10.10.2.6		Project Resources	admin
10.10.2.7		Assigning Permissions to Projects	admin
10.10.2.8		Windows Authentication	admin
10.10.2.9		Active Directory Integration	admin
10.12.10		Groups API	api
10.12.13		Users API	api

18 documents found.

Setting User Options

Navigate to the Customization section from the Customize link in the top right hand section of the menu. If you have Gemini Administrator privileges you will then be able to navigate to the People tab and the Options sub tab (see below).

1. Allowing users to self-register - Check the “Allow users to self-register” check box if you want new visitors to the Gemini site to be able to register themselves. This option does not allow such self-registered users to control their permissions and their access will be controlled by the New User Default Groups that are also defined on this page.

2. Allowing unauthenticated access - Check the “Allow users to browse Gemini without logging on first” to allow unauthenticated access to your Gemini site (provided such users can reach it anyway). Unauthenticated users will be given permissions associated with the user group “Everyone”, which is different from the user group “Everyone (Authenticated)”, allowing you to control what they can see and do on the site.

3. Other Options

• Specify the email subject line and text for the password reset email, sent to users as part of the “forgotten password” process

• You may decide to force new users to reset their passwords immediately after logging on (recommended if passwords are set manually by a Systems Administrator)

• You may specify the default user groups that new users will fall into if you do not specify their Groups for them

• You may specify a user group for external clients, known as the Portal User Group

• You may craft a welcome title and message for external clients , known as the Portal Welcome Title and Portal Welcome Message respectively

Active Directory Integration

Gemini supports Active Directory and single-sign-on. To configure Active Directory integration, navigate to the Customization section from the Customize link in the top right hand section of the menu. If you have Gemini Administrator privileges you will then be able to navigate to the System tab and the Active Directory sub tab (see below).

You will need to specify your AD connection string and a valid Username and Password for the Gemini application to use for authentication and access to the AD user information. Gemini has two standard options:

1. Sync with Active Directory – this tells Gemini to poll Active directory (by default hourly) and to synchronize AD user data with Gemini
2. Add new users to Gemini found in Active Directory – this tells Gemini to add any new users that it finds to the Active Directory user Groups. For this to work you must first have mapped you Active Directory Groups to Gemini Groups as only mapped AD Groups will be processed (see Groups).

Manually adding/maintaining new users

In the Customization section, if you have the appropriate permission you will then be able to navigate to the People tab and the Users sub tab (see below).

To Add a new User, click on the Add button. You will be prompted to provide:

• Firstname
• Surname
• Email address
• Username
• Password (requires confirmation)
• One or more security Groups that the user will belong to from a drop-down list of existing groups

To maintain the details of an existing user you can either click in the field and use Gemini’s inline editing to easily and instantly change the field value or you can click on the Edit icon on the right of the screen.

To delete a user record click on the Delete  icon on the right of the user details. You cannot delete a user record that is associated with data in your Gemini instance and you will receive a warning to that effect if you try to do so.