Users Authentication Tab

Use this tab to assign appropriate authentication rules for login to the PPM product suite.

You can also use this tab to disable a user login.

Field Description
Basic Authentication This option is selected by default. It requires you to enter your user ID and password each time you access the PPM product. When you select this option, the Domain field becomes disabled.

This option is always selected for the SYSADMIN user. However, for other users, it is disabled if the Authentication Mode on the System Authentication tab is set to Windows.

Set Password Click this button to display the Set Password dialog box. This button only becomes enabled when you select the Basic Authentication option.

Once you click the Forgot Password button on the login screen or the Set Password button on the Users Authentication tab, the PPM Administrator will send you a temporary password to your registered email address. The temporary password is valid for only 24 hours.

Upon logging in using the temporary password, the PPM Administrator will prompt you to set your new password.

Note: If the user's account is locked, the user cannot use temporary passwords to unlock it . A system administrator must unlock the account on their behalf.
Windows Authentication Select this option to log on to the PPM product without providing a user ID and password on the login dialog box. Selecting the Windows Authentication option integrates your Windows ID with PPM Administrator.

Deltek recommends that you import the user list through Active Directory to ensure the user login IDs match the Windows environment.

For all users except SYSADMIN, this option is disabled if the Authentication Mode field is set to Basic on the System Authentication tab. It is selected by default if Authentication Mode is set to Mixed.

Domain Enter a domain or select one from the drop-down list. It is only enabled, and a specific value is required, when you select the Windows Authentication option. The first domain in the list is selected by default. The same value displays in the Domain column of the Users grid, which displays when the Users form is in list view.

Selecting the Basic Authentication option removes the value of the Domain field and disables both the Domain field and the Windows Authentication option. Moreover, it also deletes the corresponding value of the Domain column in list view.

Login Enabled This option is used to prevent a selected user from logging on to an application. This option is selected by default. If it is not selected, the user will not be able to log on to any PPM product.

This option is not selected if you enable Maximum Retries Before Lockout on the Password Policies page and the user attempts invalid logins beyond this maximum value. To enable a user's login after the maximum number of retries, check this box.

Account Locked

When PPM Administrator locks a user's account due to password violations, the Account Locked label displays. Typically, a user account is locked after too many incorrect password attempts. Each failed attempt increments the counter, and when it reaches the limit (Maximum Retries Before Lockout), PPM Administrator locks the account. If a login attempt is successful, the counter resets.

When a user is locked out, their password will not work until a system administrator unlocks their account. This applies to all users, including SYSADMIN. To unlock the account, click the Unlock link beside Account Locked. You can only use temporary passwords or set a new password once your account is unlocked.

If the user's record is not locked, the Account Locked label and Unlock link do not display.

To access this tab, see Display the Users Authentication Tab.