Framework Administration
From the Framework Administration application you can manage:
You can also view system Logs.
Domains
A Domain is a logical unit of groups and users. Each domain can use a seperate form of authentication. The methods of authentication are:
- Built-in - user names and passwords are stored in a database.
- Active Directory - user names and passwords are stored on an Active Directory server on your network.
- OpenID - user names and passwords are stored on a remove server.
Each domain is given a name. The name is used on the login screen so it should be short and easy to remember.
AD Domains
AD domains have the option of importing groups as users log in. You can also import users AD properties and profile photo to be made available through the Framework Service and integrated into your own applications easily. When connecting to an AD server you can choose between a Basic binding, Secure binding, or SSL binding.
Groups
A group is a collection of users and is associated with a Domain. Only users from the same Domain can be a member of the group. Groups are useful because they can be authorized to use an Application and granted permission to Roles which members of the group inherit.
Users
Users are the people who login and use applications. They can also be service accounts used to get a validation ticket to a particular service. They can belong to one or more group and have access to applications and permissions. A user can belong to only one domain although that persons user name can also be used in another domain.
Applications
Applications represent any portion of a computer program or web site that you want to give users and groups access to. Applications are identified by matching a URL or string to a query that you define while creating the application. When a user has access to an application, it shows up on their Dashboard.
Settings
These are some of the things you can control the settings for:
- User inactivity
- Mail Server
- SSL
- Website theme
- Password:
- Complexity
- Expiration
- History
- Recovery
- Blacklists
- Error logging
- Instance information
- Email Templates for:
- Password Reset
- Approved and Denied User Notification
- Request Account Notification
Logging
The system records a few different types of logs. There is a Login History which records successful logins by users and services. There is a Login Attempt history which tracks unsuccessful login attempts and gives you the option to ban IP addresses (or automatically ban an IP after a number of invalid attempts). There is an Audit Log which tracks every bit of information that changes. Lastly, there is an Error Log which contains all HTTP errors.