The IDM (Identity Management System) is an essential part of UCS. Thanks to the central administration of the data, it is ensured that the necessary data for the logins following different standards is available and unified.
One of the essential features of UCS is the option to set a password for the user. The user can then reset the password, e.g., when using the self-service.
When using an additional application such as RADIUS (WLAN connection), any user can use their domain password to log on to the WLAN.
For data protection reasons, it could happen that a user should not use the domain password for multiple applications, such as WLAN, at the same time. In such a case, the system needs different passwords for each application. Therefore, we have launched an extension for UCS that provides an alternative, service-specific password for RADIUS.
If the two apps RADIUS and Self Service are installed, you can activate the new feature. To do this, first execute the following line of code in the console of the UCS node with the RADIUS app:
ucr set radius/use-service-specific-password=true
Then execute the following line of code on the Self-Service Backup Server (usually the Primary Directory Node):
ucr set umc/self-service/service-specific-passwords/backend/enabled=true
The “Password Wireless LAN” tile is then displayed in the self-service. Users can use this to call up an input mask for editing the specific Wi-Fi password and generate a new password.
Consequently, users now have a separate service-specific password set for RADIUS via Self-Service. They can no longer log on to the WLAN with their domain password.
Should a user forget or lose their password, they can generate a new password at any time. The old password will be invalid. As UCS generates a random password for the users, it is impossible to repeatedly use the same RADIUS password or use the same password as used for the domain login. Thus it ensures that the additional password is only used for critical applications.
Last but not least, the unique password increases the security of the application and the entire system.
In the future, administrators will be able to use the generic design of the system to expand it for similar requirements in different scenarios.
