Windows authenticated logon

Windows Active Directory authenticated logon options

Once you have installed the HelpMaster Web Portal, you may wish to configure the HelpMaster Web Portal to also allow Windows authenticated logins and provide a single-sign-in user experience. This is very convenient for corporate users on a domain network.

This feature requires you to first synchronize users with Active Directory

Windows authenticated single-sign-on is only possible once you have synchronized HelpMaster users accounts with their corresponding Active Directory user account on your network domain. See Active Directory User Synchronization for details.

Windows Authenticate Staff Only (Client users are external)

To allow Staff only Windows authenticated logins via the web portal, do this:

From the HelpMaster Desktop > Web menu > Web Settings toolbar button
Click on the Web Logins tab
Check (tick) the Allow automatic login using Active Directory checkbox
Ensure that Automatic Active Directory login (all users are on the domain and AD synced) is NOT selected. Otherwise external Clients (not logged into the domain) will receive a Windows authentication dialogue box and be prevented from logging in manually
Click the Apply button to save the changes

Always Windows Authenticate All Users

Only use if ALL users, Staff & Clients, are always logged onto your Intranet or Domain. Enable as follows:

From the HelpMaster Desktop > Web menu > Web Settings toolbar button
Click on the Web Logins tab
Check (tick) the Allow automatic login using Active Directory checkbox
Enable the Automatic Active Directory login (all users are on the domain and AD synced) option. (Attempts to login externally i.e. not logged into the domain, will receive a Windows authentication dialogue box generated by the browser, where they must enter their Windows Domain credentials in order to gain access to the web portal)
Click the Apply button to save the changes

Allow logging in with Windows user name and password

This option will allow logging into the web portal using your Windows Active Directory user name and password. Enable by also ticking the Allow logging in with Windows user name and password option.

Security Warning!

The Allow logging in with Windows user name and password selection is optional, but may present a security risk giving external users the ability to test if Active Directory user accounts are valid or not. If enabling this option make sure that your Active Directory Group Policy Account Lockout Policy is enabled to prevent brute force attacks.