Passwords for new users

For security, in environments with native authentication three types of users can be defined in the Oracle Central Coding application. In all cases, the user profile is stored in the Oracle Central Coding database along with the user ID. The user types differ in where the system stores the passwords and how the system authenticates the user. The user type is set on the User details page in the Oracle Central Coding user interface.

• Native user—Password maintained by the Oracle Central Coding application.

  When the user logs in, the authentication module hashes the password entered by the user and compares it to the hashed password stored in the database. The user is granted access to the application only if the hashes match.

• Windows user—Does not have a password stored in the database.

  When the user logs in, the authentication module uses the user name and password entered on the Log In page and uses a Windows API to authenticate the user.

  In this mode, the Oracle Central Coding application has no knowledge of what the password is, and it is up to Windows to determine if the user is granted access. This user type requires Oracle Central Coding users to be created as part of a Windows domain. The format of the user ID supports only the user ID, such as joe if you want to log in to the current domain, or EAST\joe if you want to authenticate the user joe in the domain EAST.

• Certificate user—The system checks a digital certificate for a valid user name and password.