Dual Authentication

Openspace and Workspace (as well as custom WCC applications) can be configured to allow dual authentication, meaning that the application concurrently supports both direct authentication (also called basic authentication) and single sign-on (SSO) authentication.

When configured for dual authentication, users can log in using direct authentication, even if ActiveMatrix BPM is configured to use SSO authentication. Dual authentication can be used with the following forms of SSO: SiteMinder, Kerberos, OpenID Connect, SAML Web Profile.

To configure dual authentication, you must do both of the following:

  • Using ActiveMatrix Administrator, set the authAllowUsername substitution variable to True (in ActiveMatrix Administrator, Applications > amx.bpm.app > System > amx.bpm.app > Substitution Variables).
    Note: The authAllowUsername substitution variable can also be set in TCT when ActiveMatrix BPM is being installed. Use the Allow also basic username authentication option on the ActiveMatrix BPM: Authentication Configuration dialog. For information, see "ActiveMatrix BPM: Authentication Configuration" in ActiveMatrix BPM Installation and Configuration.
  • Launch the application with "&ldap=true" appended to the application URL.