Home
Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
Authentication realms
Authentication realms manage users and determine user identity within authorization realms for the server.
Creating users manually
You can manually create users on the server for internal security and SSO type authentication realms.

Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
- Guidelines for setting up server security
  Although there is no single best way to set up security for the server, the following steps are sufficient in most cases.
- SSL configuration
  With Secure Sockets Layer (SSL) technology, clients and servers can communicate securely by encrypting all communications. Data is encrypted before it is sent and decrypted by the recipient. This communication cannot be deciphered or modified by third-parties. In addition to encryption, SSL can also support authentication.
- Authorization realms
  Use the Authorization Realms pane to create authorization realms and user groups for the server. Groups can be imported from external systems, such as LDAP.
- Authentication realms
  Authentication realms manage users and determine user identity within authorization realms for the server.
  - Creating authentication realms
    To create an authentication realm on the server, specify where to store information about the users, such as internal storage on the server, a single sign-on service, or on an LDAP server.
  - Creating users manually
    You can manually create users on the server for internal security and SSO type authentication realms.
  - Editing user information manually
    You can manually edit the stored name, email address, and password for user accounts on the server for internal security realms. For an SSO authentication realm, name and email address are passed in via HTTP headers (for example, from an HTTP proxy that is translating Kerberos tokens into HTTP headers).
  - Importing LDAP users
    On the server, LDAP authentication realm users are imported from external LDAP systems.
  - Updating LDAP users and groups
    LDAP users' name, addresses, and groups can be updated.
- Roles and permissions
  A role is a list of permissions that users have on the HCL Launch server. These permissions include the ability to create, edit, and delete objects, such as applications, environments, and components. The permission also includes the parts of the server interface that users can access.
- Security teams
  Users and groups on the server are assigned roles when they are added to teams.
- Security types
  Security types define categories of objects on the server. You can put all objects into a single category, or you can put them in separate categories and give roles different access rights to different categories.
- Tokens
  Tokens provide authorization for agents, agent relays, users, and external systems or applications from the server. Agents use tokens when they run process steps and communicate with the HCL Launch server and external services.
- Checking and resetting the API key and certificate for agents
  You can view the API key of an agent and reset the key.

Creating users manually

You can manually create users on the server for internal security and SSO type authentication realms.

Before you begin

Editing user information requires permission to view the Authentication (Users)page. Make sure that the user's role has the Manage Teams and WebUI | Settings Tab permissions enabled.

Procedure

On the server, click Settings > Authentication (Users) > target realm > Create User.
In the Create User dialog box, enter the user information:
1. Enter the user name that is associated with the account in the Username field.
2. Enter the password for the user in the Password field.
  Password complexity can be configured from the System Settings page.
3. Enter the user's name in the Name field.
4. Enter the email address that is associated with the account in the Email field.
Save your work when you are done.

What to do next

After you add a user to an authentication realm, you must also add the user to groups or teams.