Authentication / MFA / Single Sign On / Password Policies

All our products support the following types of Authentication

• Traditional Authentication (Username and Password)

• Single Sign On (SAML 2.0)

  • Azure AD (step-by-step instructions available)

  • OKTA (step-by-step instructions available)

  • SiteMinder
    We will provide our requirements and configuration parameters, but customer is responsible for getting the authentication and authorization to work.

  • Shibboleth
    We will provide our requirements and configuration parameters, but customer is responsible for getting the authentication and authorization to work.

Assumptions made by MathCraft -- The customer has the resources and SMEs to help configure/implement necessary configurations within their Identity Provider (IdP). MathCraft cannot support or guide a customer through on what they should be doing within their IdP.

Single Sign On (SAML 2.0)

• Role Based Access Control (RBAC) is not supported by our products.

• Login Methods

  • Access Commander uses SP initiated login

  • Portal Commander uses IdP initiated login

• User/Group Management
  Customer IT/IAM Personnel is responsible in ensuring the individual needing access to the products belongs in the respective Group.

Access Commander (Traditional Authentication)

• Multi-Factor Authentication (MFA) is available to customers (at no additional cost) who are using the Traditional Authentication.

• Password Storage and Encryption
  User Passwords are stored in the data layer. They are encrypted using Salt Encryption.

• Password Complexity
  Must contain at least

  • 2 Uppercase Characters

  • 2 Numbers

  • 2 Special Characters

• Password Policies
  These are configurable by the Application System Admin in System Profile via System Admin mode

  • Enforce Password History
    Can be enabled or disabled using a value of Y or N.

  • Minimum Password Length
    Can be defined by a numerical value between 15 (minimum) and 60 (maximum).

  • Number of Passwords to Remember
    Applicable only if Password History is enabled.
    Can be defined by a numerical value between 1 (minimum) and 10 (maximum).

  • Password Age
    This is based on number of calendar days.
    Can be defined by a numerical value between 15 (minimum) and 90 (maximum).

Portal Commander (Traditional Authentication)

• Multi-Factor Authentication (MFA) is not available.

• Password Storage and Encryption
  User Passwords are stored in the data layer. They are encrypted using Salt Encryption.

• Password Complexity (Coming Soon - Q4 2024)
  Must contain at least

  • 2 Uppercase Characters

  • 2 Numbers

  • 2 Special Characters

• Password Policies (Coming Soon - Q4 2024)
  These are configurable by the Application System Admin in System Profile via System Admin mode

  • Enforce Password History
    Can be enabled or disabled using a value of Y or N.

  • Minimum Password Length
    Can be defined by a numerical value between 15 (minimum) and 60 (maximum).

  • Number of Passwords to Remember
    Applicable only if Password History is enabled.
    Can be defined by a numerical value between 1 (minimum) and 10 (maximum).

  • Password Age
    This is based on number of calendar days.
    Can be defined by a numerical value between 15 (minimum) and 90 (maximum).