45 docs tagged with "Access & Security"

| Property | Description | Default |

Some applications require possession of a hardware security token for authentication. These applications as a rule employ two-factor authentication following the principle of "Something you know (password) and something you have (physical token)".

User management and access control based on user groups

You can set up the WorkFusion (WF) User Management component (Keycloak) to authenticate users based on identities from external providers.

User Federation

Install Java

Secrets Vault use cases

Users always belong to and are created within a particular realm or imported into a realm from an external identity or storage provider.

Instead of mapping attributes and roles to individual users, you can create groups of users sharing common attributes and role mappings.

To deactivate a user means to disable it after a period of inactivity that you can configure. For the Workfusion realm, it is set to 90 days by default, implying that all users inactive for more than 90 days are disabled automatically. For all other realms, the default value is zero days, meaning the User deactivation feature is turned off, and users won't be deactivated automatically.

Sensitive customer information is protected by encryption at the Data Store level. However, the same data is used in Manual Tasks, namely, in worker answers from Workspace, thus persisting in system tables without encryption.

Sensitive customer information is protected by encryption at the Data Store level. However, the same data is used in Manual Tasks, namely, in Worker answers from Workspace, thus persisting in system tables without encryption.

What is Keycloak

Superset is an open-source analytics tool that WorkFusion has integrated into its Product to monitor various process metrics. The tool is installed along with the Product, and the Superset-based dashboards become available from Control Tower immediately after installation. To start working with Superset-based dashboards, you only need to configure acess for users.

Why IDE has its secure storage

The role-based access mechanism (RBAC) limits access to data through Analytics dashboards based on the following filter categories:

Microsoft Windows uses a global certificate storage to keep

The document describes the integration of ADFS or SSO with WorkFusion services.

The organization’s IT Operations install the WorkFusion Enterprise development environment. A certain contribution to migration is required from the IT Operations side.

Framework license

Keycloak has two levels of roles:

In Control Tower, the Role Management page lists all roles available for the application users and allows managing associated permissions.

Each Keycloak realm comprises a set of clients and users, together with associated roles and groups. Realms are isolated from one another and can only manage and authenticate the users that belong to them.

The Intelligent Automation Cloud provides Secrets Vault (formerly Secure Storage) functionality intended for storing sensitive data (i.e., login, password).

To manage the secure properties, install the designated utility on the main installation server:

As soon as a user logs into a realm, Keycloak maintains their session while keeping track of their activities. Keycloak admins can view the data on all or particular user sessions and log out users of all or a particular session.

Each Keycloak user can manage their personal data and credentials and view information about their login sessions via the User Account Service. Users can access it via Control Tower or Workspace.

To access any Workspace functionality, each user must have a role and permissions assigned to them.

Intelligent Automation Cloud Enterprise (IA Cloud Enterprise) v10.2 no longer supports qualifications. Instead, Workspace 2.0 employs a new approach to managing user permissions and restrictions, where:

IA Cloud Enterprise uses internal Vault as KMS for Minio encryption by default. For more information, see Configure KMS server for MinIO encryption.

A migration tool is available as part of the IA Cloud installer, enabling you to seamlessly migrate users, groups, qualifications, roles, and related mappings.

For working with REST API with an enabled Identity Provider (IDP), you cannot use your IDP ID or password. The recommended approach is to

s3

Description

Secrets Vault plugins provide the functionality to manage Secrets Vault. Secrets Vault plugins work using the /secrets-vault WorkFusion Rest API. To learn more, refer to Secrets Vault API.

List of secure properties

To manage the access to Superset dashboards and related components, use standard Control Tower roles and permissions. To view or change the Superset-related permissions in Control Tower, navigate to System setting > Role management.

Default clients

Transparent Data Encryption (TDE) is the MSSQL feature to encrypt database data and transaction log without changing an application. DB engine encrypts or decrypts data during the query execution.

Overview

To validate the accessibility of an S3 object from a different host, follow the steps below:

The guide describes the procedure of updating TLS certificates (server.crt, server.key, and ca.crt) on already installed Workfusion Intelligent Automation Cloud (IA Cloud) environment.

This guide describes the update of passwords for the installed Workfusion Intelligent Automation Cloud Enterprise.

Create the following users on the corresponding servers before the installation.

For WorkFusion public REST API, refer to Swagger.