TABLE OF CONTENTS

• Introduction
• How Portal Authentication Works
• Accessing the Portal Authentication Rule Editor
• Portal Authentication Rule Layout
• Configuration Settings
• Creating a Portal Authentication Rule
• Editing the Content of the Authentication Page
• Setting up Windows/Azure Authentication
• Further Support

Introduction

Portal authentication is a network access control method that requires users to authenticate themselves through a web-based portal before gaining access to the internet or specific network resources. ManagementStudio has an inbuilt portal authentication feature that helps prevent unauthorized access to data. This allows administrators to control who accesses the data/information and monitor user activity. 

How Portal Authentication Works

The portal authentication process displays a login page where the user must enter credentials (such as a username and password, an access code). Once the user submits their information, the credentials are verified against an authentication server. If the credentials are valid, the user is granted access. If the credentials are invalid, the user is denied access or asked to re-enter their information. After successful authentication, the user is granted access.

Accessing the Portal Authentication Rule Editor

• Switch to Administration -> Portal Settings (1)
• Click on either New Wrapper (2) or on an existing Wrapper (3)
• In the window scroll down to the Authentication panel (4)
• Click New (5)

Portal Authentication Rule Layout

Multiple Auth Levels are NOT supported, please only check items of the same level (on the same row)

Configuration Settings

Authentication Level	Authentication Rule Selected	Authentication Options Displayed
Grid User with AD/Azure Login	Local AD Auth Azure AD Auth One-Time-Passcode
ManagementStudio Login	Local AD Auth Azure AD Auth Native MS Auth
AD Or Azure Login	Local AD Auth Azure AD Auth

Creating a Portal Authentication Rule

• Switch to Administration -> Portal Settings (1)
• Click on either New Wrapper (2) or on an existing Wrapper (3)
• In the window scroll down to the Authentication panel (4)
• Click New (5)

• The Portal authentication rule editor will appear similar to the below

• Enter a meaningful name for the authentication rule (1)
• Enable the checkbox 'This page requires authentication' (2)
• Select the required Authentication Type and Authentication levels (3)
• Further restrictions to the Authentication rules can be added based on the following:
  • Blueprint Id
  • Blueprint FolderId
  • DeployUnit Id 
  • Role Group Id

Please see table below on the restrictions and the Authentication type it uses.

• If this is required, Click on 'Click here to add new item' (4)
• Click Save (5) to commit the changes

Editing the Content of the Authentication Page

These login pages are editable via the authentication portion of the wrapper. Almost everything on that page can be editable.

• Switch to Administration -> Portal Settings 
• Click on either New Wrapper  or on an existing Wrapper
• In the window scroll down to the Authentication panel 
• Click New or Edit to edit an existing rule
• Scroll to the 'Customise the Multi-Auth Log in Page' panel

Setting up Windows/Azure Authentication

In order to enable windows authentication, you must install the windows authentication role service, and then enable Windows authentication for the ManagementStudio website. Please refer to this article on how to set this up.

Further Support

If you require further support, please visit ManagementStudio's Service Desk to search the knowledge base or create a new support ticket.