{"id":3164,"date":"2021-04-06T12:12:29","date_gmt":"2021-04-06T10:12:29","guid":{"rendered":"https:\/\/taskcontrol.cz\/docs\/taskcontrol\/user-management\/authentication-methods\/"},"modified":"2024-08-20T10:39:59","modified_gmt":"2024-08-20T08:39:59","slug":"authentication-methods","status":"publish","type":"docs","link":"https:\/\/taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/","title":{"rendered":"Authentication Methods"},"content":{"rendered":"<p>TaskControl uses several authentication methods depending on the technical implementation.<\/p>\n<p>Authentication methods cannot be combined.<\/p>\n<h2>OpenIDConnect (OIDC)<\/h2>\n<p>OIDC protocol implemented by Microsoft Azure Active Directory is the most common way to authenticate a user to TaskControl. The authentication process is fully in control of Microsoft Azure. The\u00a0 Azure AD user creates confirmation ticket that is securely redirected to TaskControl verifying user identity (unique ID correspoinding to Azure AD identifier). If the user account is configured for multi-factor authentication, the second factor is used as well.<\/p>\n<p>OIDC authentication can be deployed in Azure or on-premise TaskControl implementation.<br \/>\nUsers can work with enterprise Azure AD accounts or Microsoft public accounts (@hotmail.com, @live.com, @outlook.com etc.) if allowed during implementation.<\/p>\n<p>OpenIDConnect implementation from other providers can be considered but is not implemented at this moment.<\/p>\n<h2>Windows Authentication (Built-in)<\/h2>\n<p>For on-premise deployment of TaskControl in own customer datacenter with MS Active Directory, it is most common to use single-sign on method. The internet browser provides secured Windows Authentication using kerberos ticekt from operating system and the user is authenticated from Windows login account.<\/p>\n<p>Windows authentication is typically used with Active Directory structure where web server with TaskControl is part of an AD domain as well as the client computers accessing TaskControl website. It is possible in special circumstances to create local account on the webserver with same user and password combination as on the local computer.<\/p>\n<h2>Local user (Form)<\/h2>\n<p>TaskControl can be deployed with local users storing password in TaskControl database. This implementation is not recommneded due to lower level of security.<\/p>\n","protected":false},"featured_media":0,"parent":3148,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.12 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\r\n<title>Authentication Methods | TaskControl<\/title>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_US\" \/>\r\n<meta property=\"og:locale:alternate\" content=\"cs_CZ\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"Authentication Methods | TaskControl\" \/>\r\n<meta property=\"og:description\" content=\"TaskControl uses several authentication methods depending on the technical implementation. Authentication methods cannot be combined. OpenIDConnect (OIDC) OIDC protocol implemented by Microsoft Azure Active Directory is the most common way to authenticate a user to TaskControl. The authentication process is fully in control of Microsoft Azure. The\u00a0 Azure AD user creates confirmation ticket that is [&hellip;]\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/\" \/>\r\n<meta property=\"og:site_name\" content=\"TaskControl\" \/>\r\n<meta property=\"article:modified_time\" content=\"2024-08-20T08:39:59+00:00\" \/>\r\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\r\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/\",\"url\":\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/\",\"name\":\"Authentication Methods | TaskControl\",\"isPartOf\":{\"@id\":\"https:\/\/taskcontrol.cz\/#website\"},\"datePublished\":\"2021-04-06T10:12:29+00:00\",\"dateModified\":\"2024-08-20T08:39:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Dom\u016f\",\"item\":\"https:\/\/taskcontrol.cz\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ORBIT TaskControl\",\"item\":\"https:\/\/taskcontrol.cz\/docs\/en-docs-taskcontrol\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"User Management\",\"item\":\"https:\/\/taskcontrol.cz\/docs\/en-docs-taskcontrol\/user-management\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Authentication Methods\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/taskcontrol.cz\/#website\",\"url\":\"https:\/\/taskcontrol.cz\/\",\"name\":\"TaskControl\",\"description\":\"Automatizujte koordinaci aktivit\",\"publisher\":{\"@id\":\"https:\/\/taskcontrol.cz\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/taskcontrol.cz\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/taskcontrol.cz\/#organization\",\"name\":\"ORBIT s.r.o.\",\"url\":\"https:\/\/taskcontrol.cz\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/taskcontrol.cz\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/taskcontrol.cz\/wp-content\/uploads\/2020\/05\/ORBITlogo.png\",\"contentUrl\":\"https:\/\/taskcontrol.cz\/wp-content\/uploads\/2020\/05\/ORBITlogo.png\",\"width\":200,\"height\":200,\"caption\":\"ORBIT s.r.o.\"},\"image\":{\"@id\":\"https:\/\/taskcontrol.cz\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/orbit\"]}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Authentication Methods | TaskControl","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/","og_locale":"en_US","og_type":"article","og_title":"Authentication Methods | TaskControl","og_description":"TaskControl uses several authentication methods depending on the technical implementation. Authentication methods cannot be combined. OpenIDConnect (OIDC) OIDC protocol implemented by Microsoft Azure Active Directory is the most common way to authenticate a user to TaskControl. The authentication process is fully in control of Microsoft Azure. The\u00a0 Azure AD user creates confirmation ticket that is [&hellip;]","og_url":"https:\/\/taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/","og_site_name":"TaskControl","article_modified_time":"2024-08-20T08:39:59+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/","url":"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/","name":"Authentication Methods | TaskControl","isPartOf":{"@id":"https:\/\/taskcontrol.cz\/#website"},"datePublished":"2021-04-06T10:12:29+00:00","dateModified":"2024-08-20T08:39:59+00:00","breadcrumb":{"@id":"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/authentication-methods\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Dom\u016f","item":"https:\/\/taskcontrol.cz\/"},{"@type":"ListItem","position":2,"name":"ORBIT TaskControl","item":"https:\/\/taskcontrol.cz\/docs\/en-docs-taskcontrol\/"},{"@type":"ListItem","position":3,"name":"User Management","item":"https:\/\/taskcontrol.cz\/docs\/en-docs-taskcontrol\/user-management\/"},{"@type":"ListItem","position":4,"name":"Authentication Methods"}]},{"@type":"WebSite","@id":"https:\/\/taskcontrol.cz\/#website","url":"https:\/\/taskcontrol.cz\/","name":"TaskControl","description":"Automatizujte koordinaci aktivit","publisher":{"@id":"https:\/\/taskcontrol.cz\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/taskcontrol.cz\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/taskcontrol.cz\/#organization","name":"ORBIT s.r.o.","url":"https:\/\/taskcontrol.cz\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/taskcontrol.cz\/#\/schema\/logo\/image\/","url":"https:\/\/taskcontrol.cz\/wp-content\/uploads\/2020\/05\/ORBITlogo.png","contentUrl":"https:\/\/taskcontrol.cz\/wp-content\/uploads\/2020\/05\/ORBITlogo.png","width":200,"height":200,"caption":"ORBIT s.r.o."},"image":{"@id":"https:\/\/taskcontrol.cz\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/orbit"]}]}},"_links":{"self":[{"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/docs\/3164"}],"collection":[{"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/comments?post=3164"}],"version-history":[{"count":0,"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/docs\/3164\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/docs\/3148"}],"next":[{"title":"Azure AD User Management","link":"https:\/\/taskcontrol.cz\/en\/docs\/en-docs-taskcontrol\/user-management\/azure-user-management\/","href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/docs\/3165"}],"wp:attachment":[{"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/media?parent=3164"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/taskcontrol.cz\/en\/wp-json\/wp\/v2\/doc_tag?post=3164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}