Authentication Flow
Users are guided through the same authentication forms, regardless of whether they are authenticating to the CDM desktop client or a CDM web application, such as Certent 365.
User Identification
The account is identified by introducing the username or the email address associated to the CDM account.
The browser will typically offer auto-complete options when returning to the CDM desktop client or the CDM web applications.
For AD/LDAP accounts, users are no longer required to select the import source (domain). The domain is automatically identified.
User Password
After introducing the username or email address, users are redirected to the appropriate password step depending on the account type.
CDM Native Users and CDM AD/LDAP Import Source Users
For CDM native or AD/LDAP accounts, users are shown the CDM password form.
If the username or email address is not entered correctly, the user can go back and correct it. Credentials can now be saved to the browser passwords and, when doing so, the password step will auto-complete the password.
External Identity Provider Accounts
For accounts imported from an OpenID Connect, SAML 2.0p, or WS-Federation Identity Provider, CDM will redirect the user to the familiar corporate authentication form.
After a successful authentication, the user is redirected to the CDM desktop client or the CDM web application that initiated the authentication operation.
Multi Factor Authentication (MFA) is supported, and CDM does not limit the MFA configuration options.
No Password Authentication
When the security token obtained after a successful authentication has not yet expired and the security cookie is still available in the browser, the authentication flow directs the user directly to the application without needing to enter the user name or password.
Integrated Windows Authentication
If the CDM Identity Server component is configured for Integrated Windows Authentication, a user is identified and validated automatically. Assuming the user has CDM product access, they are greeted and offered the option to advance to the application or sign in with a different account.
Server Selection for the CDM Desktop Client
The CDM desktop client can be used to connect to multiple CDM application servers, such as a development, test, or UAT server.
When opening the CDM desktop client, the authentication flow is initiated against the user's default CDM application server. The user identification form of the authentication flow and the greeting form of the Integrated Windows Authentication flow show the CDMServer URL that the user is opening. The user is also able to switch to a different server.