1.6		Using Windows Authentication	install admin
8		People and Permissions	admin
8.1		Users	admin
8.2		Groups	admin
8.3		Permissions	admin
8.4		Active Directory Integration and Windows Authentication	admin
10.10.2		Users & Security	admin
10.10.2.1		User Management	admin
10.10.2.2		Global and Project Groups	admin
10.10.2.3		Working with Global Groups	admin
10.10.2.4		Working with Project Groups	admin
10.10.2.5		Available Permissions	admin
10.10.2.6		Project Resources	admin
10.10.2.7		Assigning Permissions to Projects	admin
10.10.2.8		Windows Authentication	admin
10.10.2.9		Active Directory Integration	admin
10.12.10		Groups API	api
10.12.13		Users API	api

18 documents found.

Gemini provides a security model that enables re-use across projects whilst ensuring user access can be controlled to ensure only relevant information and features are exposed.

Both Forms based and Windows based authentication is supported.

Virtually all security related functions require Gemini Administrator access.

The following general security settings should be noted.

The Allow User Registrations option determines whether anyone who can access your Gemini instance via web browser can create a user account.

The Allow Anonymous Users option determines whether all users first have to authenticate with Gemini before seeing anything – a login screen.

The Show Gemini Statistics option controls whether the following is displayed on the home page.

The two Reset Password options allow you to customize the email subject line and message that users receive in the email when they wish to reset their password.

The Force User Password Reset option can be used to ensure new users are forced to change their password after first login.

The Single Sign On Key option defines the shared secret that is used to optional has the user password.

The SSL Credential Encryption option specifies how the incoming SSO key is encrypted and/or hashed using the Single Sign On Key. The following options are available:

• Receive MD5 Encrypted Password Hashed with SSO Key
• Receive MD5 Encrypted Password
• Receive Clear Text Password Hashed with SSO Key
• Receive Clear Text Password

In order to invoke the SSO process in Gemini, the calling process should navigate to the following URL:

http://your-gemini-instance/security/sso.aspx?u=username&p=password

The following C# code snippet shows how you can use SSO to sign a user into Gemini:

 1: string pwd = "your clear text password here";

 2: string ssoKey = "countersoft"; 

 3:  

 4: pwd = new CounterSoft.Gemini.Commons.GeminiHelper().Encrypt(pwd, ssoKey);

 5: Response.Redirect("http://localhost/gemini/security/sso.aspx?u=manager&p=" + pwd);

The Captcha option forces users to enter a validation code when creating or commenting upon an Item.

The Screen option controls the Filter Options and Grid Columns that are displayed by default when the user filters by All Projects.

The Global Groups For New Users options allows you to specify default group membership. You can then allocate default user permissions to those groups knowing that all new users will automatically inherit those permissions.

The Help Desk Welcome Caption & Message options affect the following when users identified by the Help Desk User Group option log into Gemini.

The Help Desk User Group option determines which users are treated to a Help Desk experience where they only see their own items and with limited navigation user experience.