| Section | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Creating Roles
With builtWith frevvo built-in security manager, a tenant admin can create and manage roles directly in a tenant; roles are commonly used in workflows and for digital signatures. See the Manage Roles topic for instructions on creating and managing roles.
With the LDAP Security Manager or Delegating Security Manager, groups are the equivalent of the roles created in tenants that use the built-in security manager. Please refer to the documentation for those security managers for information about creating users and groups (roles).
Creating Users
With With frevvo' built-in security manager, a tenant admin can create and manage users directly in a a frevvo' tenant. See the Manage Users topic for instructions on creating and managing users.
With the LDAP Security Manager or Delegating Security Manager, users and groups (which are equivalent to rolesfrevvo roles) are defined outside of frevvo.
Using Roles & Users
If you use LDAP Security Manager, please refer to your LDAP documentation, the Working with LDAP page, and FAQ - frevvo and LDAP for information about using roles and users.
Security Manager Configuration
has frevvo has a built-in security manager that allows you to create users and roles directly in your tenantyour frevvo tenant. Refer to this documentation for more information.
Passwords
uses frevvo uses a more secure salted hash strategy for storing hashed user passwords. Salting a hash of passwords makes the password storage better protected from dictionary and brute force attacks.
uses frevvo uses a random salt value for each user's password and the salt changes whenever the password changes. In order for proper operation, older unsalted (i.e. bland) passwords are still supported. Passwords for new users and password changes for existing users will result in the creation of salted password hashes. The old passwords in the database (users table) are 28 characters in the hashed form.
Salted passwords are used in both the in-house and hosted versions of of frevvo. Here are some features where a salted password is used:
...
Access control allows more flexibility when the designer is assigning access to execute forms and workflows, view/edit form/workflow submissions and view the audit trail of an active workflow. Access can be granted to users to frevvo users and/or roles in these three areas. Refer to this Access Control and Shared Items for the details.