===== Configuring single sign-on / Active Directory integration =====

==== Introduction ====
It is now possible to log into IQX using Active Directory authentication. Provided a user has the required permissions and security setup, clicking on the IQX icon will log the user straight in to IQX without having to complete the login box.

Where the user does not have rights to use an integrated log in or there is an error with the Active Directory setup, the user will be presented with standard login dialog box.

==== To Configure in IQX ====
To set up IQX to permit silent login enter the required domain information into General settings – Security settings 20 and 25. 
{{ :17-07-2017_18-31-12.png?direct |}}
  * **Domains allowed to connect** list (separated by semicolons) the domains you wish to allow integrated logins from.
  * **Domain group** The Active Directory group that controls access to IQX

Users' IQX login names must match their Windows user names.
==== To Configure in Active Directory ====

Set up a group in Active Directory, and make authorised users of IQX members of that group.

==== Using Integrated Logins ====
If integrated logins are enabled (see above), when IQX is launched it checks whether the current Windows user is:  
  * a properly authorised member of an authorised domain
  * a properly authorised member of the active directory group specified 
  * is a valid, current IQX user defined in IQX user maintenance
  * the shortcut clicked specifies the required database
If all these conditions are satisfied, the user is logged in to IQX without the normal login dialog box being displayed. The user is given the user rights and credentials specified in IQX for that Windows user.

If any of these conditions are not met, then the usual IQX login dialog box is shown.

==== Using a different database or connecting as a different user ====

After connecting as the current windows user. Choose File | Change User from the IQX menu. The the usual IQX login dialog box is then shown.