Set the user authentication method

Set up the authentication method for when device users sign in to Knox Manage on their mobile devices.

To set the authentication method, complete the following steps:

1. Navigate to Setting > Configuration > Basic Configuration, and then click Authentication Setting at the bottom of the page.

2. In the Authentication Setting window, select the authentication method.

   Type	Description
   Automatic	Verifies the device users using the default method provided by Knox Manage. Locally registered users will use their user ID and password saved in the Knox Manage server. Synchronized users will use their user ID and password imported by AD/LDAP synchronization.
   Manual	Customizes the authentication method by user type.

3. If you selected Manual, select the authentication method by user type.

   • Sync User Authentication Settings — Select the authentication method for synchronized users.

     Item	Description
     Authenticator	globalEmmAuthenticator — Uses the user ID and password saved in the Knox Manage server. globalLdapAuthenticator — Uses the user ID and password saved in AD/LDAP synchronization. globalLdapServiceAuthenticator — Uses the user ID saved in the Knox Manage server and the password saved in the AD/LDAP server accessed by a directory service.
     LDAP Service ID	If you selected globalLdapServiceAuthenticator, enter the directory service ID to use for accessing the AD/LDAP server.

   • Local User Authentication Settings — Select the authentication method for locally registered users.

     Item	Description
     Set identical to the Sync User Authentication Settings	Uses the same authentication method as set in the Sync User Authentication Settings section.
     Authenticator	globalEmmAuthenticator — Uses the user ID and password saved in the Knox Manage server. globalLdapAuthenticator — Uses the user ID and password saved in AD/LDAP synchronization. globalLdapServiceAuthenticator — Uses the user ID saved in the Knox Manage server and the password saved in the AD/LDAP server accessed by a directory service.
     LDAP Service ID	If you selected globalLdapServiceAuthenticator, enter the directory service ID to use for accessing the AD/LDAP server.

4. Click Save.