Sign in to the Web GUI

You can sign in to the Communications Broker as a User or an as Administrator, depending on your permissions.

You can sign in to the Web GUI using any one option:

• Sign In — Uses local, RADIUS, or TACACS+ credentials
• Sign in with Single Sign-On (SSO) when it is configured on the system. SSO login uses external Identity Provider (IdP) authentication.

You need your User name, Password, and optionally your passcode to sign in. The system requires your passcode when two factor authentication is enabled. If your system Administrator configured the optional sign in page message, the system displays the message after you enter your credentials. After reading the message, click Close, and the system displays the GUI. The first time you sign in, the GUI displays the Configuration Assistant.

1. On a PC, open a supported Internet browser. See "Browser Support" in your software version's Release Notes for the list of supported browsers.
2. Start the GUI with either the HTTP or HTTPS sign in.

   http://<YourEcbManagementInterfaceIpAddress> previously configured.
   https://<YourEcbManagementInterfaceIpAddress> previously configured.

   Note:

   • Whether you sign in using HTTP or HTTPS depends on the settings for your deployment.
   • Start the GUI using either HTTP or HTTPS; however, SSO is supported only over HTTPS.

   Figure 4-1 Sign in Screen

   
   

   

   
   
3. In the Sign in page, there are 2 options:
   • Sign In — Uses local, RADIUS, or TACACS+ credentials
   • Sign In with Single Sign-On — Uses external Identity Provider (IdP) authentication.
   1. In the Sign in dialog, enter your Communications Broker credentials.
   2. Click Sign in. The Sign in banner is displayed. For more information on the Sign in Banner, see Login Banner.
   1. To sign in using SSO, click Sign In with Single Sign-On. ECB does not require a username or password. Authentication is handled by the configured Identity Provider (IdP).
   2. After successful authentication, you are redirected back to the ECB Web GUI and signed in.
4. If your Communications Broker requires two-factor authentication, do the following:
   1. In the Sign in dialog, enter your passcode.
   2. In the Confirm dialog, acknowledge the Last sign in information. Yes—allows you to sign in. No—ends the session.
5. Click Sign in.

   Note:

   If you want to open another Web GUI tab on the same Communications Broker in a new tab in the same browser, you can do so without signing on again.

Login Banner

After a successful user authentication and authorization, Communications Broker displays the login banner.

The Login Banner displays:

• Last login: Date and time that the current user last successfully logged-in.
• System last accessed: Date and time and user name of the last user who successfully logged-in.
• Unsuccessful login attempts: Date and time of the last five unsuccessful login attempts by the current user.
• Confirm reading: Needs confirmation from the current user. On clicking Confirm, the current user can completes login, and the audit-log activity for this user session is started. If the current user clicks Cancel, the current user is logged out of the Communications Broker , and an audit-log entry is created.

The login banner also provides notification of impending password expiration.