Simul Enterprise can identify (and authenticate) users using one of the following methods:

• navigate_next User Registration (Default)
• navigate_next Active Directory (LDAP)
• navigate_next OAuth (App Registration)

User Registration

This method allows users to register and create an account unique to Simul Enterprise. Users will be authenticated using an email address and password.

To use this method, end users will need to verify they are the owner of the registered email address by responding to a verification email.

To configure user registration, open the Simul Enterprise management application installed on your server and select "Identities":

Ensure the "Registration" radio button is checked and add a list of domain names you wish to restrict Simul to.

Restricted domains will apply during registration and when a user attempts to share a document. It is recommended you restrict the list of domains to your organizations email domain(s) to make it clear who can access the platform.

Active Directory

Using Active Directory integration allows user to use the same credentials they use to log-on to their computers.

This enables Simul to skip any verification of email addresses and automatically restricts the sharing of documents to users which exists in Active Directory.

To enable, open the Simul Enterprise management application installed on your server and select "Identities":

Ensure the "Active Directory" radio button is checked and provide the following:

• navigate_next LDAP Host: The host name or IP address of the Active Directory server
• navigate_next LDAP Port: The port used to communicate with Active Directory
• navigate_next Domain base: The common name of organizational unit to restrict access to
• navigate_next LDAP Encryption: Whether to use SSL / LDAPS when communicating with Active Directory
• navigate_next Domain search user: A user account with read-only access to the domain base. This is needed to validate users exists when sharing documents
• navigate_next Domain search password: The password for the domain search user account
• navigate_next Email field: The field in Active Directory containing unique email addresses for users
• navigate_next Search filter (optional): An LDAP filter which can be used to further restrict access to a subset of users. A common use case with Active Directory is to restrict access to members of a group like so: (memberOf=GroupName)

OAuth

Simul supports authentication via Auth0 and Azure App Registration using the OAuth protocol.

Azure Active Directory

To authenticate using your existing Azure Active Directory users, register an app as described here

For account type, select "Accounts in this organizational directory only". For the Redirect URI, select "Web" and enter the following: "https://your-simuldocs.com/auth/oauth/callback" where your-simuldocs.com is the domain you are hosting Simul Enterprise. You must also enable "ID tokens" under "Authentication > Implicit grant"

Once created, setup a new Client Secret under the "Certificates & secrets" tab and enter the following details in the Simul Enterprise managment console:

• navigate_next Client id: Application (client) ID of your registered app
• navigate_next Domain: Directory (tenant) ID of your registered app
• navigate_next Client secret: Value of the client secret you created
• navigate_next Callback URL: The URL your users access your Simul instance, e.g. "https://your-simuldocs.com" is sufficient

Auth0

To authenticate using your existing Auth0 users, register an app as described here

Add an allowed callback URL similar to: "https://your-simuldocs.com/auth/oauth/callback" where your-simuldocs.com is the domain you are hosting Simul Enterprise.

Once created, enter the following details in the Simul Enterprise managment console:

• navigate_next Client id: Client ID of your registered app
• navigate_next Domain: Domain of your registered app
• navigate_next Client secret: Client Secret of your app
• navigate_next Callback URL: The URL your users access your Simul instance, e.g. "https://your-simuldocs.com" is sufficient

Press "Test and Save". Simul will validate your parameters and inform you of any errors.

Applying Settings

Any updates to Simul's configuration are not effective until an administrator applies them. This includes if the system is restarted.

After making changes of any kind, an indicator will appear on the "Status" tab in the navigation of the management application:

This icon indicates there are pending configuration changes which are yet to take effect.

To apply the changes, select "Status" in the management application and you will see a message like so:

By clicking "Apply Settings" Simul will be restarted with the modified configuration. Please be aware this involves a short outage (around 1 minute) for end users.