Domain Authentication Properties
The following properties are available for Domain Authentication objects, grouped by the categories shown in the authentication service editors.
Behavior
| Property | Type | Default | Description |
|---|---|---|---|
bool |
true |
Controls whether the authenticated user is allowed to share saved views with everyone. By default, the user is allowed to share saved views with everyone. The property is typically set to False when the RolesToShareViewsWith and/or UsersToShareViewsWith properties restrict the roles and/or users with whom the user is allowed to share saved views. |
|
bool |
true |
Controls whether the application starts up when the user is not assigned any roles. |
|
string[] |
An optional list of allowed domain controllers (i.e., dc1.appliedolap.com). |
||
string[] |
An optional list of allowed domains (i.e., appliedolap.com). |
||
string[] |
An optional list of allowed group name prefixes. This can be useful for filtering the list of groups assigned to users. See also: StripGroupPrefixes |
||
string[] |
An optional list of allowed group name suffixes. This can be useful for filtering the list of groups assigned to users. See also: StripGroupSuffixes |
||
string |
When the user is not assigned any roles and AllowStartupForUserAssignedNoRoles is False, a MessageBox is optionally displayed. If MessageTextForUserAssignedNoRoles is non-empty, the MessageCaptionForUserAssignedNoRoles is used as the MessageBox caption. |
||
string |
When the user is not assigned any roles and AllowStartupForUserAssignedNoRoles is False, a MessageBox is optionally displayed. If MessageTextForUserAssignedNoRoles is non-empty, a MessageBox is displayed and the MessageTextForUserAssignedNoRoles is used as the MessageBox text. |
||
bool |
false |
Controls whether to capture the authenticated username in user principal name format (user@domain.tld) instead of down-level logon name format ("domain\user") when both formats are available. |
|
RolesRequiredForStartupFilter |
RolesRequiredForStartupFilter.AnyRole |
Controls which roles are required to start the application. AnyRole - allows any user with an assigned role to start the application. AnySpecificRole - allows any user with an assigned role that matches any of the specified roles to start the application. AllSpecificRoles - allows any user who matches all of the specified roles to start the application. See also: RolesRequiredForStartup_SpecificRoles |
|
ViewAccessInfoList |
Identifies the specific role requirements to start the application when the RolesRequiredForStartup property is set to AnySpecificRole or AllSpecificRoles. |
||
bool |
false |
Controls whether to strip AllowedGroupPrefixes from group names that start with them. See also: AllowedGroupPrefixes |
|
bool |
false |
Controls whether to strip AllowedGroupSuffixes from group names that end with them. See also: AllowedGroupSuffixes |
View Sharing
| Property | Type | Default | Description |
|---|---|---|---|
RolesToShareViewsWithFilter |
RolesToShareViewsWithFilter.None |
Controls which roles (i.e. MSAD/LDAP groups) the authenticated user is allowed to share views with. None - No sharing with individual roles is allowed. SameRoleAsUser - Sharing is allowed with the roles that the authenticated user is also assigned to. AllRoles - Sharing is allowed with all roles. SpecificRoles - Sharing is allowed with the roles identified by the RolesToShareViewsWith_SpecificRoles property. |
|
ViewAccessInfoList |
Identifies the specific role(s) the authenticated user is allowed to share views with when the RolesToShareViewsWith property is set to SpecificRoles. |