Activate Integrated Authentication

System Administrator Help

Restrict Access to Windows Integrated Authentication

You can define a specific group of computers on a network that can use Windows integrated authentication. Only computers in that domain security group will be allowed to use Windows integrated authentication. Users in other computer groups would have to log on as normal. Note: The defined computer group does not affect LDAP integrated authentication. In the System Administrator application, select View > Universal Preferences. Select General Options. In the Preference list, double-click Windows Integrated Authentication Computer Group, and then enter the name of the domain security group in the field. Select OK. Parent topic: Set Up Integrated Authentication

System Administrator Help

Map a User for LDAP Integrated Authentication

By mapping individual users to users in the Active Directory, you enable them to use LDAP authentication. To map a user, in System Administrator main window, select the user. On the External tab, select Map LDAP User. The Add External LDAP User window appears. Under LDAP User Search Options, the Domain search field defaults to the name of the domain currently logged into, and the First Name and Last Name fields default to the first and last names of the selected NextGen Healthcare user. If you need to find a different user, enter the search criteria in the LDAP User Search Options, and then select Search. The matching results display. Select the username row, and then select OK. The user's LDAP domain and username display on the External tab. Parent topic: Set Up Integrated Authentication

System Administrator Help

Map Multiple Users for LDAP Integrated Authentication

Instead of mapping users one at a time, you can map them in bulk to save time. Select the View > LDAP Integration Setup. The LDAP Integration Setup window appears. Select the domain to be searched for matches. Under Bulk User Mapping Utility, select the enterprise, practice, and the criteria to match. Select View User Mapping Results. The LDAP User Mapping window appears listing the NextGen users and potential matches from the Active Directory. Select the check boxes for the correct matches, and then select OK. Parent topic: Set Up Integrated Authentication

System Administrator Help

Set Up LDAP Integration Proxy Access

If your network is controlled by a proxy server, users mapped for LDAP integrated authentication need access to successfully log on. The proxy account works for all users mapped for LDAP integrated authentication regardless of whether they were mapped individually or in bulk. Select View > LDAP Integration Setup. The LDAP Integration Setup window appears. Select the domain. Under Proxy Account Setup, select Edit. The Username and Password fields become available. Enter the proxy account user name and password, and then select Update. If you need to set up the proxy account for another domain, select a different domain, and then repeat the previous steps. Select OK. Parent topic: Set Up Integrated Authentication

System Administrator Help

Set Up Integrated Authentication

You perform all integrated authentication setup in System Administrator. Setup is a three-step process. Turn on LDAP mapping. The setting enables the Map LDAP User button on the user under General tab. Map each NextGen application user to a user name in Active Directory. You can map them individually or in bulk. If necessary, you can provide proxy access for mapped users. Activate Integrated Authentication In System Administrator you can turn on LDAP and Windows integrated authentication. Map a User for LDAP Integrated Authentication Map Multiple Users for LDAP Integrated Authentication Set Up LDAP Integration Proxy Access Restrict Access to Windows Integrated Authentication Parent topic: LDAP and Windows Integrated Authentication

System Administrator Help

LDAP and Windows Integrated Authentication

The NextGen Healthcare applications support the use of Lightweight Directory Access Protocol (LDAP) authentication and Windows integrated authentication for user logon. The authentication eases administration access and allows single sign-on through directory-integrated authentication. With both kinds of authentication: The LDAP user mapping options in System Administrator become available, which enable you to map NextGen Healthcare users to Active Directory users. You can map users one at a time or in bulk. You can set account access to a proxy server for all mapped users. Note: The NextGen Healthcare applications still track user changes to data, such as for significant events, by their NextGen user ID. LDAP Integrated Authentication Limitations - LDAP and Windows Integrated Authentication Set Up Integrated Authentication Parent topic: Users

Activate Integrated Authentication

Recommendations

Restrict Access to Windows Integrated Authentication

Map a User for LDAP Integrated Authentication

Map Multiple Users for LDAP Integrated Authentication

Set Up LDAP Integration Proxy Access

Set Up Integrated Authentication

LDAP and Windows Integrated Authentication