Managing Authentication Modules Estimated Reading Time: 2 Minutes An authentication module lets users log in to Ubersmith through an external identity source, such as LDAP, Active Directory, or SAML. This article covers managing a module after it exists: viewing the module list, editing a module, matching its groups to Ubersmith roles, and deleting a module. For creating a new module, see Adding a User Authentication Module. Viewing Authentication Modules Go to Config > User Authentication to open the User Authentication page. The Authentication Modules section lists every configured module. Each row shows: ID Priority — the order Ubersmith tries modules in during login (lower numbers first) Enabled — Yes or No Create User on Login — whether a matching Ubersmith user is created automatically the first time someone authenticates through this module Module — the module type, such as LDAP or SAML Info — an identifier for the module, such as its LDAP server hostname or SAML identity provider name, useful for telling apart multiple modules of the same type Actions — edit access, edit, and delete links Note: Edit access only appears once a module has its required connection details saved (for example, an LDAP module needs its server address) and its module type supports group lookups. Editing a Module Click edit on a module's row to open the Edit Authentication Module popup. It has three tabs: Details — the module's Enabled toggle, Module type, Priority, and Create User on Login checkbox Config — settings specific to the module type, such as server address, port, and bind credentials for LDAP, or metadata and certificate settings for SAML Brand Access — which brands can use this module to log in, either Full Brand Access or specific brands checked individually Make the needed changes and click Update. Matching Groups to Roles and Brands Click edit access on a module's row to open the Group Access popup. Use it to map each group your authentication server returns to an Ubersmith role, so a user's rights carry over from their group membership. For LDAP and Active Directory modules, the group list is populated automatically from the directory server. For a SAML module, groups aren't populated automatically — add each group name manually using the blank row at the bottom of the table. For each group, choose: A Role — the Ubersmith role to grant, or None Access per brand — check individual brands, or check All Brands to grant every brand at once Click Update to save. For a manually-added SAML group, click delete on its row to remove it. Note: Checking All Brands for a group automatically checks and locks every individual brand checkbox for that row. Deleting a Module Click delete on a module's row, then click Yes to confirm. Deleting a module removes it immediately; users who authenticated only through that module can no longer log in with it.