Group: proj-helpdesk
Alexandre Boisseau (boisseau@univ-brest.fr)
boisseau at univ-brest dot fr
Benjamin SECLIER (bseclier@univ-nancy2.fr)
benjamin dot seclier at univ-nancy2 dot fr
Brice Quillerie (bquiller@univ-montp1.fr)
brice dot quillerie at univ-montp1 dot fr
Brigitte Wallaert Taquet (wallaert@univ-lille1.fr)
brigitte dot wallaert at univ-lille1 dot fr
Doriane Dusart (ddusart@univ-valenciennes.fr)
doriane dot dusart at univ-valenciennes dot fr
Fabien Wald (wald_f@uhb.fr)
fabien dot wald at uhb dot fr
Fabrice Jammes (fjammes@univ-paris1.fr)
fabrice dot jammes at univ-paris1 dot fr
Harold Moyse (1986138@sac.cru.fr)
harold dot moyse at uvsq dot fr
Jean Philippe FLORET (a04a3347@univ-cezanne.fr)
jp dot floret at univ-cezanne dot fr
Julien MARCHAL (jmarchal@univ-nancy2.fr)
julien dot marchal at univ-nancy2 dot fr
Julien Pedrono (1986401@sac.cru.fr)
julien dot pedrono at insa-rennes dot fr
Mathieu MOLINERIS (molineris@univmed.fr)
mathieu dot molineris at univmed dot fr
Miniussi Alain (2276872@sac.cru.fr)
alain dot miniussi at oca dot eu
Odile Germes (germes@univ-rennes1.fr)
odile dot germes at univ-rennes1 dot fr
Pascal Aubry (paubry@univ-rennes1.fr)
pascal dot aubry at univ-rennes1 dot fr
Philippe Lecler (2324998@sac.cru.fr)
philippe dot lecler at irisa dot fr
Vincent Repain (vrepain@univ-rennes1.fr)
vincent dot repain at univ-rennes1 dot fr
Yves Deschamps (ydescham@univ-lille1.fr)
yves dot deschamps at univ-lille1 dot fr
Skip to end of metadata
Go to start of metadata

User types

Three authentication methods are proposed by the esup-helpdesk application:

  • CAS (Central Authentication Service),
  • Shibboleth (Identity Federation),
  • Application (by the application itself).

CAS users

Identification

CAS users are identified by their unique ID in the Information System, typically the LDAP uid (e.g. paubry). Their id in the database is prefixed by cas- (e.g. cas-paubry).

Authentication

CAS users are authenticated:

  • for portlet deployments: by the portal thanks to CAS.
  • for servlet and quick-start deployments: directly by CAS.

Profiles

CAS users are characterized by their attributes in the Information System: the LDAP directory (see Configuring the LDAP access).

Shibboleth users

Identification

Shibboleth users are identified by their ID, as provided by Shibboleth (e.g. paubry@univ-rennes1.fr). Their id in the database is prefixed by shib- (e.g. shib-paubry@univ-rennes1.fr).

Authentication

Shibboleth users are authenticated:

  • for portlet deployments: by the portal thanks to Shibboleth.
  • for servlet and quick-start deployments: directly by Shibboleth.

Profiles

Shibboleth users are characterized by the attributes passed to the application by:

  • Shibboleth for servlet and quick-start deployments (HTTP headers)
  • The portal for portlet deployments (JSR-168 preferences).

Application users

Identification

Application users are identified by their email address (e.g. pascal.aubry@gmail.com). Their id in the database is prefixed by app- (e.g. app-pascal.aubry@gmail.com).

Authentication

Application users are authenticated by the application itself, thanks to a password. The password is generated at the account creation and sent to the users by email. The password can be re-sent to the users at any time later.

Application users and portlet deployments
For portlet deployments, the portal runs as guest for external users.

Profiles

No attribute is avalable for application users.

Administrators

The administrators of the application are true users.

The first administrator is created by the application when initializing the database (see 03 Administration).

Afterwards, administrators are co-opted using the 'Administration' menu.

The 'Administration' menu is visible by the administrators only.

Preferences

All the authenticated users (local or external) can manage their preferences using the 'Preferences' menu.

Ticket monitoring allows users to recieve alerts by email when events occur on tickets. By checking the proposed boxes, users receive emails with links that allow them to access the application directly (even when the application is deployed as a portlet in a portal).

The last link ('Edit your preferences as a manager') is show to managers only and allows them to manage their manager preferences:


Labels:
None
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.