To verify a user’s identity, a user must be authenticated. Relatics has built-in authentication using email and password protection. This can be enhanced with multifactor authentication.

Relatics supports the Identity Provider (IdP) Microsoft Entra, formerly known as Microsoft Active Directory, which can be used as an alternative for user authentication. As a result, the authentication is managed centrally within the organization (SSO). Three steps need to be taken to authenticate users using Microsoft Entra.

1. Register Relatics as an App in Microsoft Entra
2. Configure Microsoft Entra in the Relatics environment
3. Create or switch users to be authenticated by Microsoft

Register Relatics as an App in Microsoft Entra

Relatics uses OpenID Connect (OIDC) to identify a Microsoft Entra user. Before you can configure the connection in the Relatics environment, the Microsoft Entra administrator needs to create an App-registration. This action should result in the following information:

• Tenant-id
• Client-id
• Client secret value

The Microsoft Entra administrator needs a Redirect URL to complete his registration. This URL becomes available when configuring the Microsoft Entra in Relatics.

Configure Microsoft Entra in the Relatics environment^*

1. In the overview with workspaces, click on Environment administration.
2. In the view Environment administration, click on the menu Security.
3. In the table Authentication via Microsoft, click on  Edit. This opens a dialog where you can configure the connection.
4. For the field Tenant ID, provide the Tenant-id supplied by the Microsoft Entra administrator.
5. For the field Client ID, provide the Client-id supplied by the Microsoft Entra administrator.
6. For the field Client secret, provide the Client secret value supplied by the Microsoft Entra administrator.
7. Click Update. The connection to Microsoft Entra is configured.
8. Copy the Redirect URL and send this to the Microsoft Entra administrator to complete his App-registration.

Note:

• To prevent users from being unable to login, test the Microsoft authentication setup with one account before switching users.

Create a user who authenticates via Microsoft^*

When the Microsoft Entra identity provider is configured, you can choose if a created user authenticates via Relatics or Microsoft.

Switch user authentication between Relatics and Microsoft^*

Ralatics has two different authentication sources; Relatics and Microsoft. Users are assigned to one authentication source. It is possible to switch a user to the other authentication source.

Switching authentication from the perspective of a user:

1. In the overview with workspaces, click on Environment administration.
2. In the view Environment administration, click on the menu  Users.
3. Click on the desired user. As a result, the detailed settings of the corresponding user are shown.
4. In the table User, click on  Edit. This opens a dialog where you can configure the user information.
5. For the field Authentication via, select the desired authentication source.
6. Click Update.

Switching authentication from the perspective of an authenticator:

1. In the overview with workspaces, click on Environment administration.
2. In the view Environment administration, click on the menu Security.
3. Choose the authentication source that should authenticate the users, click on switch user. This opens a dialog showing the users connected to the other authentication source.
4. Check the users from whom you want to switch the authentication source.
5. Click Update.

Note:

• It is advised to have one Relatics authenticate administrator for situations where Microsoft Entra cannot be reached.

* In the environment, the administration role of your user must be set to administrator to enable this feature.