はじめに

🚧

注:

Superadmin ユーザーに対してシングル サインオンを有効化するには、最新版 (v2021.4 以上) のディスパッチャーのビルドを使用する必要があります。

When setting the ExternalAuthenticationProviders setting of the Server Settings the Azure AD groups panel becomes available on the Superadmin users tab. Here you can add new Azure AD user groups. App developers who are a member of a group defined in the Superadmin users tab can log in the UiPath Process Mining with their Microsoft account using single sign-on. Depending on the authentication provider that is used for Single Sign-on, a Sign in with Microsoft button or Sign in with your Windows domain button will be present on the Superadmin Login dialog. See the illustration below for an example.

Adding AD groups (Azure Active Directory)

📘

注:

When creating a new Azure AD Group in UiPath Process Mining you must provide the Identifier of the Azure AD group. You can find this Azure AD group identifier in the Groups settings in Microsoft Azure Portal.

Follow these steps to add an AD group.

The new group is created and displayed in the list of Azure groups. See illustration below for an example.

Adding AD groups (Integrated Windows Authentication)

Follow these steps to add an AD group.

🚧

注:

AD groups are case-sensitive.

The new group is created and displayed in the list of AD groups. See illustration below for an example.

Superadmin login

When a Superadmin user logs in using single sign-on a new user is created automatically in the Superadmin users tab. See illustration below for an example.

📘

注:

Single sign-on access is provided through AD groups, not through the auto-provisioned user entry. This is only used to preserve individual settings, for example, Favorites. The entry is read-only, so you cannot change the user settings.

ライセンス

Although the users are authenticated via an AD group, a license is allocated by each app developer that logs in to UiPath Process Mining.
Note that when a group is deactivated or deleted, app developers can no longer log in but still have a license slot allocate until the Superadmin user entry is actually deactivated or deleted.

Managing account activation

App developer accounts can be disabled by deactivating an AD group. When an AD group is deactivated, the accounts that are assigned to the group will no longer be able to login.
Follow this step to disable authorization for all developer accounts of an AD group.

これはトグル式のチェック ボックスです。つまり、ユーザーはチェック ボックスがオンの場合にログインでき、オフの場合にはログインできません。