TABLE OF CONTENTS

• Portal Authentication Overview
• How Portal Authentication Works
• Accessing the Portal Authentication Rule Editor
• Portal Authentication Rule Layout
  • Authentication Levels
  • Authentication Types
• Configuration Settings
• Creating a Portal Authentication Rule
• Editing the Content of the Authentication Page
• Setting Up Windows/Azure Authentication
• Further Support

Portal Authentication Overview

Portal authentication is a network access control mechanism requiring users to verify their identity through a web portal before accessing ManagementStudio resources. This built-in feature helps prevent unauthorised access, allowing administrators to control and monitor who is able to access sensitive data.

How Portal Authentication Works

When enabled, portal authentication prompts users with a login page requiring credentials (such as username and password, or a one-time access code). These credentials are validated against an authentication server. Access is granted if the credentials are valid; otherwise, access is denied, and the user may be asked to re-enter their details.

Accessing the Portal Authentication Rule Editor

To create or edit portal authentication rules:

1. Navigate to Administration → Portal Settings.
2. Select either New Wrapper or an existing wrapper.
3. Scroll down to the Authentication panel.
4. Click New to add a new authentication rule.

Portal Authentication Rule Layout

Authentication Levels

• Grid User with AD/Azure Login: Users present in AD and/or Azure who must also be in the User Migrations Grid.
• ManagementStudio Login: Standard ManagementStudio user accounts.
• AD or Azure Login: Users in AD and/or Azure not necessarily present in the User Migrations Grid.

Authentication Types

• Native MS Auth: Authenticates using ManagementStudio username and password.
• Local AD Auth: Authenticates using credentials from the local Active Directory domain.
• Azure AD Auth: Authenticates using a configured Azure Active Directory domain.
• One-Time-Pass: Authenticates via an automatically generated numeric code.

  Only available for users listed in the grid and domain users. The user’s email address must be present in the system.

Note: Only one authentication level may be selected at a time.

Configuration Settings

The following table summarises available authentication types by authentication level:

Authentication Level	Authentication Types	Example
Grid User with AD/Azure Login	Local AD Auth, Azure AD Auth, One-Time-Passcode
ManagementStudio Login	Local AD Auth, Azure AD Auth, Native MS Auth
AD or Azure Login	Local AD Auth, Azure AD Auth

Creating a Portal Authentication Rule

To add a new authentication rule:

1. Navigate to Administration → Portal Settings.
2. Select either New Wrapper or an existing wrapper.
3. Scroll to the Authentication panel.
4. Click New.
5. In the rule editor:
   • Enter a meaningful name for the authentication rule.
   • Enable the checkbox This page requires authentication.
   • Select the desired authentication type and level.
   • Optionally, add further restrictions by Blueprint Id, Blueprint Folder Id, DeployUnit Id, or Role Group Id (see below).
   • To add restrictions, click Click here to add new item.
   • Click Save to apply changes.

Editing the Content of the Authentication Page

Login page content can be customised via the authentication settings in each wrapper. Most elements are editable.

To customise the authentication page:

1. Navigate to Administration → Portal Settings.
2. Select either New Wrapper or an existing wrapper.
3. Scroll to the Authentication panel.
4. Click New to create or Edit to modify an existing rule.
5. Scroll to the Customise the Multi-Auth Log in Page panel.

Setting Up Windows/Azure Authentication

To enable Windows Authentication:

• Install the Windows Authentication role service.
• Enable Windows Authentication for the ManagementStudio website.

Refer to the following article for detailed setup instructions:
How to Allow Portal Login

Further Support

For additional help, visit the ManagementStudio Service Desk to search the knowledge base or raise a support ticket.