Security Tab

---

The Security tab allows you to manage the Security Permissions and access levels of various users within MobiControl.

Within the Security tab, MobiControl administrators can view user activity, manage users and user groups and edit permissions based on device groups. The leftmost panel of the Security tab is divided into three sections: User Activity, Manage Users and Device Group Permissions.

The Security tab is only visible when you are in the All Platforms tab.

User Activity

The User Activity view provides you with activity logs for both Users and Groups. To update the logs, select a User or User group. Use the log type and date filters to refine your view.

Manage Users

The Manage Users view is divided into the User/User Groups List panel and the Edit User panel, the central portion. You can add, edit, lock and delete user and user groups from within the Manage Users toggle. Global Permissions can be set for both Users and Groups. For more information, visit the Security Tab: Manage Users page.

Device Group Permissions

The Device Group Permissions view allows you to apply permissions based on device groups. For more information, see the Web Console Device Group Permissions page.

Accessing MobiControl Web Console using Directory Services

You can configure MobiControl to allow access to the Web Console using credentials verified by either LDAP or SAML 2.0 Identity Providers (IdP) directory services.

LDAP

1. While on the All Platforms tab, go to the Servers tab.
2. Under Global Settings, click the wrench icon beside Console Security Settings.
3. Switch to the LDAP Integration tab.
4. Check the Enable LDAP Integration checkbox.
5. Check the boxes for the LDAP connections you want to link to MobiControl security.

   If you have not created any LDAP connections, click Manage to open the LDAP Connections Manager to create an LDAP connection.

   Go to LDAP Connections Manager for more information on setting up LDAP connections.

6. Click OK to close the dialog.

Note

LDAP integration must be enabled to use the Self Service Portal.

IdP

MobiControl only supports IdPs using SAML 2.0.

1. While on the All Platforms tab, go to the Servers tab.
2. Under Global Settings, click the wrench icon beside Console Security Settings.
3. Switch to the SAML SSO tab.
4. Check the Enable SSO checkbox.
5. Select the IdP connection you want to link to MobiControl Web Console security.

   If you have not created any IdP connections, click Manage to open the Identity Provider Manager to create a new IdP connection.

   Go to Identity Provider Connections for more information on setting up IdP connections.

6. Click OK to close the dialog.

If you want apply specific permissions to particular groups, you must set those permissions in the Security tab, using the Manage Users section.