Active Directory Groups

Author-it user groups can be mapped to Active Directory groups making the task of setting up and maintaining security more streamlined, and the login process more secure. Active Directory Groups are used by the network to provide central authentication and authorization services, assigning access and rights to users and groups. The Author-it users and groups are mapped to the network directory groups in the Author-it Administrator. When a user has been mapped to a network directory group they can log in to Author-it as a trusted user, bypassing the login window so they do not have to type a user name and password.

By assigning the Author-it groups to Active Directory Groups the network administrator becomes the key point of contact for updating and maintaining the groups a user belongs to, rather than the Author-it administrator. When changes are made to the network groups (for example, new users are added) the Author-it groups are also updated.

As an example, if a user changes the group they belong to (say, moving from the support group to the sales group) the network administrator changes the network permissions for the user so they have access to the correct sales directories and content. When the network permissions are updated the user is automatically updated in Author-it as well. A key benefit of assigning Active Directory Groups is that changes do not need to be made by both the network administrator and the Author-it administrator.

To use the Active Directory Groups:

• Set up user groups and permissions in Author-it.
• Map the Author-it groups to the network groups.

Important: If you are updating an existing library, you will also need to map the existing users to the correct Active Directory User. Ensure you map the user before you map the group.

Once the user groups have been set up, the network administrator can take over administration for user access.

Assigning Author-it Groups to Active Directory Groups in a New Library:

1. Open the library using Author-itAdministrator, then choose Security > User and Group Accounts...
2. In Author-it Administrator create the Author-it groups and assign the appropriate permissions.
3. Map each Author-it group to the appropriate Active Directory Group.

   

4. Choose Match, then choose Yes to complete the group mapping.

   

When the user logs in to an Author-it library for the first time, Author-it looks for the user in in an Active Directory Group. When the user is found, an account is created for the user in Author-it, and the Author-it group permissions (based on the Active Directory Group/Author-it group mapping) are assigned.

If a user is moved from one Active Directory Group to another group Author-it looks for the user in the last Active Directory Group they were assigned to. Because Author-it can't find the user in that group it takes them out of the associated Author-it group. When Author-it finds the user in another group it creates a new account, and assigns new permissions.