If authentication is successful, a new user may be created on the fly as a clone of an existing template user. RADIUS (Authentication Only): Incoming usernames and passwords will be tried against a remote RADIUS server.

The following Authentication Source types are currently supported: Multiple Authentication Sources may be configured within any particular organization, and each may be of a different type (for example, two RADIUS sources and three LDAP sources) and each may reference a different template user so users already belong to the appropriate groups when they are automatically added. Authentication SourcesĪn Authentication Source is any RADIUS, LDAP, or WS-Trust server the MOVEit Transfer queries. This feature can be used along with the existing user authentication sources, For more information, see Feature Focus - Single Signon. Note: MOVEit now supports single sign-on using a SAML compliant federated identity provider as the authentication source. More information about this feature is available in the Advanced Topics - Service Integration - CAC Integration documentation. MOVEit Transfer can authenticate users using hardware client certificates in CAC Smart Card environments. More information about this feature is available in the Advanced Topics - Service Integration - SiteMinder Integration documentation. MOVEit Transfer can accept preauthenticated credentials from CA SiteMinder. In enterprise environments, an externally authenticated MOVEit Transfer site can participate in Single Sign-on (SSO) arrangements in two different ways:

When accessing an LDAP server, MOVEit Transfer can replicate group membership information and information such as email address from that LDAP server as well. MOVEit Transfer also can split an organization's user base into External Users and Internal Users, with one group using an external authentication source and the other using the MOVEit Transfer built-in user database. In addition to authenticating existing users against external sources, MOVEit Transfer can create new users, often as a clone of an existing template user. Both of these can be secured at the transport level (we encourage the use of LDAP over SSL) and related credentials are stored encrypted on MOVEit Transfer. Microsoft Active Directory (AD) operates as an LDAP server, so MOVEit Transfer can authenticate to it natively. MOVEit Transfer provides the ability to authenticate users to external LDAP and/or RADIUS servers.

Stunnel authentication