|
About User Authentication
There are two broad types of user - non-authenticated (NAU) and authenticated.
Non-authenticated users (NAU)
- User name and password not required; automatically logged into the system when auto logon is disabled or when users are allowed to change accounts and logon is optional.
- By default, all users are NAUs unless this setting is explicitly changed.
|
Anything done by an non-authenticated user cannot be audited, so organizations need to consider carefully whether or not they should allow NAUs.
|
Authenticated users
- Must log in with a user name and password.
- Are assigned to one or more roles.
- On login, the user becomes an 'authenticated user' and any activities they do in the system are fully audited.
|
