Configure Authentication for Hosts, Requesters or Approvers

If a user is already configured in C•CURE 9000 Personnel, you can set them up as user for either:

  • Basic authentication - using the Email address in their Personnel record and a password they choose when registering to access the C•CURE Portal.
  • Windows authentication - using the email address in their Personnel record and their Windows password.
    Note: A user cannot be configured for both Basic authentication and Windows authentication.

The main difference in configuration is whether or not you put a value in the Windows Principal field. If you put a value in the Windows Principal field, that user must use Window Authentication.

Note: If you need to invalidate a Web Visitor password because a password has been compromised, you can do so by changing or blanking out the Personnel Email address field, pressing Save, then changing the email address field back and saving again.

Configure Basic Authentication

To set up a user's Personnel record to use basic authentication, follow these steps:

  1. Navigate to the Options & Tools pane and select System Variables.
  2. Open the Systems Operations System Variables.
  3. Make sure that Allow Web Portal Basic Authentication is set to True.
  4. Navigate to the Personnel pane and perform a Quick Search to list eligible Hosts. See Using a Quick Search to Find Hosts, Requesters or Approvers.
  5. Select the person that you wish to edit.
  6. In the Web and Email tab, in the Email address field, enter the email address for the person.
  7. Leave the Windows Principal field blank.

    If the Windows Principal field is not blank, the system will use Windows authentication for the Host and disable basic authentication for that particular Host record.

  8. In the Options list, ensure that the Can Host Visits, Can Approve Requests, or Can Submit Requests privileges are selected.
  9. Click Save and Close.

When this person accesses the C•CURE Portal and registers for access, they are sent a link in an email so that they can select a password for basic authentication.

Configure Windows Authentication

To set up a user's Personnel record to use Windows authentication , follow these steps:

  1. Navigate to the Personnel pane and perform a Quick Search to list eligible users. See Using a Quick Search to Find Hosts, Requesters or Approvers.
  2. Select the person that you wish to edit.
  3. On the Web and Email tab, enter the email address for the person.
  4. In the Windows Principal field, type the Windows account in the format DOMAIN\USERNAME for this person.
  5. In the Web Email and Login section, in the Windows Principal field, type the Windows account (domain\username) for this person.
    • This field can only contain characters allowed in Windows domains and usernames - the following characters are not allowed: "/[]:;|=,+*?<>@.
    • The Windows domain and username must be separated by a backslash (Example: AMERICAS\GuestUser).
    • If this field is not blank, the content must be unique in the C•CURE 9000 database; a duplicate Windows Principal value produces an error and the record cannot be saved.
  6. In the Options list, ensure that Can Host Visits, Can Submit Requests, or Can Approve Request is selected.
  7. Click Save and Close.

When this person accesses the C•CURE Portal and registers for access, they will be told to return to the login screen and use their email address and Windows password to access the C•CURE Portal.