Authentication / MFA / Single Sign On / Password Policies

Modified on Thu, Jun 27 at 2:17 PM


All our products support the following types of Authentication

  • Traditional Authentication (Username and Password)

  • Single Sign On (SAML 2.0)

    • Azure AD (step-by-step instructions available)

    • OKTA (step-by-step instructions available)

    • SiteMinder
      We will provide our requirements and configuration parameters, but customer is responsible for getting the authentication and authorization to work.

    • Shibboleth
      We will provide our requirements and configuration parameters, but customer is responsible for getting the authentication and authorization to work.


Assumptions made by MathCraft -- The customer has the resources and SMEs to help configure/implement necessary configurations within their Identity Provider (IdP). MathCraft cannot support or guide a customer through on what they should be doing within their IdP.



Single Sign On (SAML 2.0)


  • Role Based Access Control (RBAC) is not supported by our products.

  • Login Methods

    • Access Commander uses SP initiated login

    • Portal Commander uses IdP initiated login

  • User/Group Management
    Customer IT/IAM Personnel is responsible in ensuring the individual needing access to the products belongs in the respective Group.



Access Commander (Traditional Authentication)


  • Multi-Factor Authentication (MFA) is available to customers (at no additional cost) who are using the Traditional Authentication.

  • Password Storage and Encryption
    User Passwords are stored in the data layer. They are encrypted using Salt Encryption.

  • Password Complexity
    Must contain at least

    • 2 Uppercase Characters

    • 2 Numbers

    • 2 Special Characters

  • Password Policies
    These are configurable by the Application System Admin in System Profile via System Admin mode

    • Enforce Password History
      Can be enabled or disabled using a value of Y or N.

    • Minimum Password Length
      Can be defined by a numerical value between 15 (minimum) and 60 (maximum).

    • Number of Passwords to Remember
      Applicable only if Password History is enabled.
      Can be defined by a numerical value between 1 (minimum) and 10 (maximum).

    • Password Age
      This is based on number of calendar days.
      Can be defined by a numerical value between 15 (minimum) and 90 (maximum).


Portal Commander (Traditional Authentication)


  • Multi-Factor Authentication (MFA) is not available.

  • Password Storage and Encryption
    User Passwords are stored in the data layer. They are encrypted using Salt Encryption.

  • Password Complexity (Coming Soon - Q4 2024)
    Must contain at least

    • 2 Uppercase Characters

    • 2 Numbers

    • 2 Special Characters

  • Password Policies (Coming Soon - Q4 2024)
    These are configurable by the Application System Admin in System Profile via System Admin mode

    • Enforce Password History
      Can be enabled or disabled using a value of Y or N.

    • Minimum Password Length
      Can be defined by a numerical value between 15 (minimum) and 60 (maximum).

    • Number of Passwords to Remember
      Applicable only if Password History is enabled.
      Can be defined by a numerical value between 1 (minimum) and 10 (maximum).

    • Password Age
      This is based on number of calendar days.
      Can be defined by a numerical value between 15 (minimum) and 90 (maximum).