Intro

TDS has multiple ways of users authentication, authorisation and provisioning. Possibilities depend combination on customer requirements and TDS capabilities.

Provisioning capabilities

• invitations
  • colleagues or leaders can send invitations to people not present in platform
• sign-up
  • users can create account by themselves - first they must validate email, then they can enter their credentials or their credentials are read from AD if present
  • it is recommended
    • for platform with AD users only without any externals (currently or in future)
    • for platform without AD connection
  • it is NOT recommended
    • in hybrid environments when AD users and NON AD users should be working in platform as users without AD account can create usernames as they wish and that can lead to conflict with current or potential future AD users leading to security issue
• CSV import
  • currently requests must be raised via standard support channels as this functionality is available for TDS support ONLY
  • recommended for
    • hybrid environments when AD users and NON AD users should be working in platform - it gives customer key users (customer area admins/owners) full control over users that are joining platform

Authorisation capabilities

Authentication capabilities

Diagram