Shown here is a configuration of a user with a federated identity such as a Bentley IMS user account. When working with this type of user the SSO User switch is set to YES and the Email address field is mandatory. The Override Password is writable and can be set to YES though in general it should be left as NO.

By default, Password is read only and the password of the federated user identified by the Email address will not be disclosed to AWLRS in order to maintain the security of that identity. Authentication is handled by the Administrator configured identity provider not AWLRS. AWLRS access permissions becomes claims based.

The Assign Proxy button is enabled, and the dialog cannot be saved until all appropriate mandatory fields are completed and a proxy has been assigned. To assign the proxy the administrating user must press the Assign Proxy button to enter the Assign Proxy form to select the proxy. The button can be used to add a proxy to the list of assignable proxies. A user can have multiple assignable proxies but only one can be selected for AWLRS.

The Override Password setting of YES is reserved for legacy users that need to manage their own AWLRS specific password in addition and separate to the federated credentials. Setting YES should be avoided unless there is a real need. Setting this to YES has significant ramifications and means the user will not benefit from all the convenience of a single sign on account.