User name and password authentication methods

When users start a Spotfire Analyst client, they select which Spotfire Server to connect to. If that server is configured for a user name and password based authentication method, the users are also prompted for their user name and password.

The user name and password are then sent to Spotfire Server.

The login experience for the Spotfire Analyst client can be customized in several ways, including whether users have the option to save their login information, and whether the dialog contains an RSS feed. For details, see Login behavior configuration.

Note: The credentials that users enter are not encrypted when they are transferred to Spotfire Server unless the server uses TLS. To help counter the risks associated with unencrypted data, enable TLS when configuring a user name and password authentication method.

For all the user name and password methods, an entry for each user is created in the Spotfire database.

If you configure authentication towards an external user directory such as an LDAP directory, the user list or group hierarchies from the external directory are automatically copied to the Spotfire database.
If you configure authentication towards the Spotfire database, the user and group information must be manually entered.

It is possible to combine authentication towards an external user directory with users added manually to the Spotfire database.

User names and passwords can be validated using one of the following methods: