Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > Identification of hybrid users > Authentication priority and overrides
Authentication priority and overrides
Web Security Help | Web Security Solutions | Version 7.8.x
You can select multiple authentication options for your end users on the Settings > Hybrid Configuration > Hybrid User Identification page. The options are prioritized as follows:
*
Web Endpoint is always used if installed on a client machine.
*
If Web Endpoint is not installed or fails, single sign-on, available beginning with 7.8.4, is used if both of the following are true:
a.
It has been deployed in your network.
b.
It has been selected on the Hybrid User Identification page for an end user whose requests are managed by the hybrid service.
*
If neither Web Endpoint nor single sign-on is available, the end user is authenticated via secure form-based authentication, if both of the following are true:
a.
It has been selected on the Hybrid User Identification page.
b.
The user agent or application requesting authentication supports form-based authentication via an HTML page.
*
Applications that do not support form-based authentication use either NTLM identification or basic authentication. Basic authentication is always used if Always authenticate users on first access is selected and none of the other options are either selected or available.
You can also enforce a specific authentication option for certain end users, for example all users in a branch office, by deploying a PAC file URL in the following format:
http://hybrid-web.global.blackspider.com:8082/proxy.pac?a=X
The a= parameter controls the authentication option, and X can be one of the following:
Parameter
Description
a=n
NTLM identification or basic authentication is used, depending on the policy settings and the browser or application capability.
a=f
Authentication is performed using secure form-based authentication.
 

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > Identification of hybrid users > Authentication priority and overrides
Copyright 2016 Forcepoint LLC. All rights reserved.