User management and authentication

This section provides information related to user authentication.

Authentication Model

ALM supports the following authentication methods:

Form login
SSO login - with special configuration required
External authentication
- IDM-SSO (Siteminder) - with special configuration required
- Smart Card - with special configuration required
- Active Directory or any LDAP provider supporting the LDAP3 protocol

Authentication Administration and Configurations

Authentication is configured using Site Administration. For details, User management.

Following are additional references:

Action	Reference
Create and manage users using OTA API	Open Test Architecture API Reference
Manage users using REST API	REST API Reference (Core)
External authentication (Smart Card or SSO)	External Authentication

FAQ

Question

Can OpenText Application Quality Management require account passwords that conform to corporate policy?

Answer

LDAP integration is a recommended solution to ensure password policy support.

Question

Which LDAP providers does OpenText Application Quality Management support?

Answer

OpenText Application Quality Management works with any LDAP provider supporting the LDAP3 protocol.

Question

Describe the session management and session lockout mechanisms (that is, how does OpenText Application Quality Management verify the user's session, how does OpenText Application Quality Management respond if verification fails, is there a lockout time-out or can it be configured).

Answer

OpenText Application Quality Management manages user sessions on the application level. The session can be terminated by the site administrator at any time. All currently opened sessions can be viewed from the Site Administration console. Each session has an expiration time that can be configured by the WAIT_BEFORE_DISCONNECT site parameter for OTA APIs and the REST_SESSION_MAX_IDLE_TIME site parameter for REST APIs.

Question

Can OpenText Application Quality Management limit the number of logon sessions per user and per application?

Answer

Since OpenText Application Quality Management provides the possibility to connect from different interfaces, such as testing tools, UI, or API, there is no limit on the number of user logon sessions.