Authentication, Roles, and Permissions

Authentication

The default authentication mechanism for Thinfinity® Workspace uses Windows logon credentials: users authenticate with the same Windows account credentials associated with the host system where Thinfinity Workspace is deployed. The platform also supports alternative authentication protocols, including delegated identity providers compliant with industry standards (e.g., OAuth, SAML) and integration with directory service protocols (e.g., LDAP, Active Directory).

Permissions

Permissions determine who can access each module of Thinfinity Workspace and who can access a specific access profile. Permissions can be granted for a single user or for a group of users. They can also grant access to a single access profile or to several access profiles grouped under a label.

Roles

Roles enable administrators to configure access control policies and approval workflows by mapping permissions to designated roles. In Thinfinity Workspace, roles are used to assign granular permissions for resource reservation management, including end-user or third-party booking, scheduling, and access authorization for specific users or user groups.