New login screen
I am currently finalising an update that will provide a unified login experience across all OpsCentre applications (except the drivers' remote). Currently OpsCentre and ReportCentre use one method of logging in (select from user list and type in a PIN) while CharterAdmin and Invoicing use another (type in a username and password). The new login screen will make the sign-on procedure the same for all applications, using a simple username and password setup.
Please note: To connect OpsCentre to Active Directory requires Microsoft's Active Directory Federation Services. Please check with your IT support to see if you have this available on your network.
As a backup, however, I will also leave in the password system for the time being, for those occasions when users need to perform an action they are not normally allowed to perform (ie: they haven't been assigned that role). In these scenarios, they can still be provided with the password in order to perform the required action.
As an example, clients that have an onsite training server will be able to give access to areas like "Leave" or "Duty Maker" to users that are learning to take on these roles. This can be done just for the training server, while still restricting their access on the production server.
Another example would be for clients who have different OpsCentre servers for different branches. Here certain users can be given access to a certain role on all servers in order to manage that area/task company-wide.
For now though, I would like all clients who use Active Directory on their network, to give some thought to the following: would you like users to be able to use their existing domain credentials to access OpsCentre, or should each user be given a new set of credentials? Note that using existing domain credentials will require that your IT support install Active Directory Federation Services (if this has not already been done) and configure it so for OpsCentre. If you would like to explore this option, please get your IT support to contact me so that we can discuss it in more detail.

Domain credentials option
Many of our customers use Microsoft's Active Directory so that each user needs only a single set of credentials to access all their various file shares and systems. The new OpsCentre login system will allow OpsCentre to become part of this, so that OpsCentre users will simply enter their normal domain credentials to access OpsCentre as well.Please note: To connect OpsCentre to Active Directory requires Microsoft's Active Directory Federation Services. Please check with your IT support to see if you have this available on your network.

User-roles replace area/action passwords
Currently OpsCentre requires a bunch of passwords to restrict access a various area or perform a particular actions. This results in users who are allowed to perform a range of actions needing to remember a multitude of passwords (or worse, writing them down somewhere). With the new login system, these passwords have been superseded by User-roles that can be assigned to users by an administrator. Users then only need to log into OpsCentre, and all actions they are allowed to perform will be available to them.As a backup, however, I will also leave in the password system for the time being, for those occasions when users need to perform an action they are not normally allowed to perform (ie: they haven't been assigned that role). In these scenarios, they can still be provided with the password in order to perform the required action.
Multi-server installations
For those clients that have multiple OpsCentre server installations, the new login system will make it easier to ensure that users have access to the right areas and actions across all OpsCentre servers – all while using the one set of credentials.As an example, clients that have an onsite training server will be able to give access to areas like "Leave" or "Duty Maker" to users that are learning to take on these roles. This can be done just for the training server, while still restricting their access on the production server.
Another example would be for clients who have different OpsCentre servers for different branches. Here certain users can be given access to a certain role on all servers in order to manage that area/task company-wide.
Availability
As mentioned above, I am still finalising the system, so we're at least a few of weeks away from deploying. I will also be staggering the client application updates one by one, so it's likely that at first only the main OpsCentre application will make use of the new login system.For now though, I would like all clients who use Active Directory on their network, to give some thought to the following: would you like users to be able to use their existing domain credentials to access OpsCentre, or should each user be given a new set of credentials? Note that using existing domain credentials will require that your IT support install Active Directory Federation Services (if this has not already been done) and configure it so for OpsCentre. If you would like to explore this option, please get your IT support to contact me so that we can discuss it in more detail.



