🐧
Linux Control Center
EN
EN
  • Introduction - User Manual
  • Requirements
    • Server Requirements
    • Client Requirements
  • Quick Start
  • Setup and Installation
  • Dashboard
  • Discover
    • Linux Control Center Discover
    • BeyondTrust Password Safe
  • Host Actions
    • Get Info
    • Package Check Update
    • Package Update
    • Package Vulnerable Update
    • Package Hold
    • Package Install
    • Package Remove
    • Account Add
    • Account Del
    • Account Expire
    • Account Lock
    • Account UnLock
    • File Add
    • File Del
    • File Download
    • Manage Host Service
    • Host Ping
    • Host Reboot
    • Host Shutdown
    • Insert Group
    • Check Vulnerability
    • Execute Custom Playbook
    • Execute Custom Scripts
    • Tenable Launch Scan
    • Tenable Sync Results
    • Delete Hosts
  • Host Groups
  • Managed Account
    • Create Managed Account
  • Managed Files
    • Create Managed File
  • 7 Library
    • Install Tenable Agent
  • 7 VulnDB-API
  • Custom Scripts
    • Linux Scripts
    • BeyondTrust Password Safe Secrets
  • Custom Playbooks
  • Hook Bridge
    • Hook Bridge
  • Workflow
    • Create Workflow
  • Assisted Workflow
  • Scheduler
  • Unmanaged Hosts
    • Microsoft Windows
  • Settings and Integrations
    • Settings
      • License
      • Worker
      • Nodes
      • Certificate
      • LCC Management
      • Diagnostic
      • Linux Credentials
      • Regions
      • Syncronized Files
      • Notifications
        • SMTP
        • Teams
        • Telegram
      • Parameters
      • Discover Timeout
      • Backup and Restore
    • Integrations
      • BeyondTrust
        • Password Safe
        • Privileged Remote Access
      • VMWare
      • Nutanix
      • Tenable
        • Security Center
        • Cloud Security
    • User Management
      • Console Users
        • Create Super User
        • Create Group Users
      • TOTP
      • Providers
        • SAML
          • Cisco Duo
          • Entra ID
      • Authentication
  • Release Notes
Powered by GitBook
On this page
  • Requirements
  • Overview
  • Authentication Panel
  • Initial Configuration
  • Selecting Users and Groups
  • Selecting Providers
  • TOTP by User and Group
  1. Settings and Integrations
  2. User Management

Authentication

PreviousEntra IDNextRelease Notes

Last updated 11 days ago

Requirements

  • Linux Control Center: version 2.12.X or higher

  • Pre-configured Single Sign-On (SSO) provider

Overview

The Linux Control Center (LCC) allows your users to centrally configure their authentication service through the "Config Authentication" menu.

Through this service, you can:

  • Control the creation of users through external authentication providers integrated with the LCC

  • Define TOTP settings

  • Manage active providers

  • Create authentication rules for groups and users

  • Perform other security configurations

Authentication Panel

  1. Access the Authentication panel through the Config option in the side menu.

  2. Click on the Authentication option.

Initial Configuration

Configure the initial parameters according to your needs:

![](/pt-br/images/authentication/inicial.png)

  • Default Provider ID: Default provider identifier, used if the user does not select a different one at the time of authentication

  • TOTP Time Tolerance: Tolerance time to validate the TOTP code after starting the login

  • TOTP Time Tmp Token Login Validation: Tolerance time for using a rotated TOTP token

  • Local Login All Users: Applies the rules in this panel to all local LCC users

  • Providers Auto Create User: Allows LCC to create the authenticated user via provider locally, if it does not already exist

  • TOTP Force All Users: Forces all users to use TOTP to login, regardless of the provider selected

Selecting Users and Groups

  1. Click Next to select the users that will have rules applied during login.

  2. In the groups tab, select the groups that will also have the rules applied.

Selecting Providers

In the Providers tab, define which providers will be available for login.

![](/pt-br/images/authentication/providers.png)

TOTP by User and Group

  1. Individually select the users that will be logged in via TOTP.

  2. Click Next to define the groups that should also use TOTP at login.

  3. Click Save to save the settings and apply them to the LCC Console.

💡 Hint: When defining users individually and disabling the TOTP Force All Users flag, other users will still be able to manually activate TOTP in their Profile panel to use it at login.