Specifications

Configuring Authentication Managing Order of Authentication

ShoreTel Mobility Router Administration Guide 92

4. If you have three options for authentication, set the Third field to an option different than the one

selected for the First or Second fields. The Mobility Router attempts to authenticate with this

setting if it cannot authenticate with the option specified in the First or Second fields.

5. The Authorization Map Order field defines the priority in which the Mobility Router assigns Roles to

different authenticated users. The default value for both Administrators and End Users is “local-

only”.

a. Local-only—The Role returned by an external authentication server during authentication

process is ignored, and the local Mobility Router defined Role is used. The default Mobility

Router defined role is “user” and is only configurable via CLI.

a. Remote-first—The Mobility Router honors the Role returned by external authentication server

if present, otherwise the local default Mobility Router defined Role “user” is used. The three

Roles which are relevant in the Mobility Router are “admin”, “monitor” and “user”.

a. Remote-only—The external authentication server returns one of three Roles, “admin”,

“monitor” or “user”.

6. Click Apply.

Note

One of the Authentication mechanisms for both Admin and User Authentication must be local, and is

recommended as the First authentication.

Note

If you have only one authentication option, set the Second and Third field to the same value as the

First field. If you have only two authentication options, set the Third field to the same value as the First

or Second field.

Note

The Admin authentication ordering is different than the End User authentication order.