User authentication is provided by this product using the CAS of SVOM. For the directory service, the directory service provided with SVOM or Active Directory can be specified.
When using the directory service provided with SVOM, user operation information from this product is coordinated with SVOM, which updates the entries of user information on the directory service.
When using Active Directory, which is not provided with this product, user operation information from this product is not coordinated. For this reason, when adding or modifying users, perform the operation on both this product and Active Directory. If a user is not added to either program, login to Cloud Services Management will fail and problems will occur when performing resource operation as shown in the table below.
Entry in Directory Service | |||
Yes | None | ||
Cloud Services Management | Yes | Logging in to Cloud Services Management is possible. (Normal) | Logging in to Cloud Services Management is not possible. Corrective action: Add a user entry to the directory service. Or, delete user information in Cloud Services Management. |
None | Logging in to Cloud Services Management is possible. However, menus cannot be operated. Corrective action: Add user information to Cloud Services Management. | Logging in to Cloud Services Management is not possible. |
Requirements for Matching User Information between Cloud Services Management and Active Directory
The following information must be the same when added:
Cloud Services Management: User ID (userId)
The login name of the coordinating SVOM
When using Active Directory as the directory service of SVOM, it is necessary to add the same user information in Cloud Services Management and Active Directory. In userId, specify the login name of the coordinating SVOM.
Planners or platform providers users can add, modify, and delete the users belonging to their department or organization. Take appropriate actions to prevent inconsistencies between the information on Cloud Services Management and Active Directory. For example, operators can notify planners or platform providers regarding user IDs to add or add the same users on Active Directory prior to the final approval.