The Spotfire Analytic Server's User Services centralizes user management, authentication, and logging for all of the components of the Spotfire Analytics platform.
Role-based Preferences
User Services enables Spotfire Administrators to quickly and
easily set up, store and manage user accounts, user groups,
passwords, licensing, preferences, and permissions. These user
profiles are used across the platform to drive data access,
content management, and application permissions.
The feature set of the Spotfire client can be configured and
customized for each role and skill set within a process. By
removing functionality and configuring preferences the complexity
of deployed application is reduced for groups of end users who
are less comfortable with advanced authoring, visualization,
and calculation techniques or whom special security requirements
are in place. In either case, the goal is a safe “data sandbox”
environment that gives comfort to both the end users and the
IT group.
Group and User Directory
The Profile Service comes with its own user directory database,
but it can also be set up to use usernames and passwords from
existing authentication systems, such as Microsoft Windows®
Domain, Microsoft Active Directory® or any LDAP compliant user
directory. If you need to read users and groups from another
source, you can create your own service provider using the Profile
Service’s published User Directory Service Provider Interface
(SPI).
Support for assigning LDAP and ActiveDirectory Groups to Spotfire
Groups allows you to completely manage group membership outside
of Spotfire. Simply set up a Spotfire Group in User Services
for each distinct role you need to support in your organization.
Then match up your existing LDAP Groups with each role. When
a user is added or removed from the group in your enterprise
LDAP system, they are automatically added or removed from the
Spotfire system.
Authentication
The Authentication Service can be configured to use existing
authentication systems, such as Microsoft Windows Domain, Microsoft
Active Directory or any LDAP compliant user directory. For additional
security checks or custom authentication methods, the system
can be extended programmatically to support any Java Authentication
and Authorization Service (JAAS).
Enable “single sign-on” by taking advantage of Windows Integrated
Authentication (NTLM). Users logged in to their Microsoft Windows
environment will automatically use their security credentials
from Windows to be authenticated by the Spotfire platform.
For increased security, the SSL/HTTPS protocol can be enabled
to encrypt all communication between the client and server.
In addition, the Spotfire Analytics Server can be configured
to reject requests from clients without a valid certificate.
Logging
The Spotfire Analytics Server provides a mechanism for configuring
user level logging of server usage events, such as log on, log
off, executed SQL access statements, and unsupported client
configurations.
NEXT » Deployment Services