3.9 KeyShield Configuration Settings

Path: Port 8443 Filr Admin Console System > KeyShield SSO

For dialog usage instructions and other KeyShield integration information, see KeyShield Integration with Filr in the OpenText Filr 23.4: Maintenance Best Practices Guide.

Table 3-7 Using the KeyShield SSO Configuration dialog

Field, Option, or Button	Information and/or Action
Enable KeyShield SSO	Select this to enable KeyShield SSO and Filr integration. Specify the configuration information for the following fields.
KeyShield Server URL (use http or https):	The access URL of the KeyShield server.
API authorization key:	The API Key copied from the KeyShield console.
HTTP connection timeout:	Enter the time in “milliseconds”. This is the time taken by Filr appliance to wait for a response from KeyShield before prompting users for their login credentials. OpenText does not recommend changing this value unless the network connection does not give quick response. For example, when Filr and KeyShield connect over a WAN.
Connector names:	The names of every KeyShield SSO connector that Filr users will connect through.
Username attribute alias:	The Username attribute entered allows the KeyShield to match username validation requests with the LDAP attribute that requests applications use for usernames. For more detail and a Filr example, see KeyShield Attribute Alias Support in the OpenText Filr 23.4: Maintenance Best Practices Guide.
Two Factor Authentication
Require hardware token	Select this to require a physical token, such as an access card, for access to Filr through KeyShield. Specify the options for missing tokens below.
Missing token error message for Web interface:	The error message to display when web access is requested and the token is not presented or not recognized.
Missing token error message for WebDAV interface:	The error message to display when WebDAV access is requested and the token is not presented or not recognized.
Allow username/password-based failback authentication (non-SSO) for LDAP users	Select this to let users enter a username and password as an alternative to the hardware token.
Test connection button	Click this to test the connection between Filr and the KeyShield server.
OK button	Click this to save your changes. Current user sessions are not affected. To see changes, users must log in to a new session.
Cancel button	Click this to cancel the changes you have made.