Directory Services and Identity Providers
Thinfinity® Workspace offers flexible authentication options, categorized into Directory Services and IdPs (Identity Providers).
Directory services are critical for the creation and management of user and group identities that directly access Thinfinity Workspace. They facilitate the provision and maintenance of required business domain accounts:
- Windows Logon (WinLogon)/Active Directory: This serves as the default Directory Service underpinning Thinfinity Workspace authentication and authorization processes.
AD Cache (RemoteAD): This connector provides a secure gateway for publishing and accessing your Active Directory instance externally, ensuring domain integration is preserved across network boundaries.
- Thinfinity IdP: The native Directory Service implementation within Thinfinity, supporting identity management and authentication functionalities.
Thinfinity Workspace supports external IdPs through various protocols, including:
- OAuth: Used by services like Google and Facebook.
- SAML
- RADIUS
RADIUS can serve dual roles in Thinfinity Workspace: as a primary authentication protocol (configured as an Authentication Method) and as a second-factor method (configured under Multi-Factor Authentication).