This chapter contains the following sections:
Access rights workflow dependencies
Describes the coordination requirements between tenant and fabric administrators when RBAC rules restrict access to fabric domains needed for certain configurations.
User access, authorization, and accounting
Explains the authentication, authorization, and accounting functions managed by APIC policies in the ACI fabric.
Login domains
Describes the authentication domain mechanism that enables users to select the correct authentication method when accessing the system.
Create login domain using the GUI
Configure a login domain using the GUI to define authentication parameters for external server authentication including SAML and OAuth 2 based on user group map rule information.
Create a provider
Create an external authentication provider for Cisco APIC.
Local user configuration
Describes how to configure local user accounts with granular, role-based access control for system management.
Remote users
Describes users who authenticate through external authentication providers instead of local user configuration.
Configure windows server 2012 LDAP for APIC access with Cisco AVPair
Configure Windows Server 2012 LDAP with Cisco AVPair attribute to enable Cisco APIC authentication and role-based access control for users.
Configure APIC for LDAP access
Configure APIC to enable LDAP authentication by setting up an LDAP provider and creating a login domain.
Change the default behavior for remote users with missing or bad Cisco AV pairs
Configure the default role assignment for remote users who have missing or bad Cisco AV pairs during authentication.
Signature-based transactions
Describes an authentication method that uses calculated signatures with private keys for secure APIC transactions.
Accounting
Explains how Cisco Application Centric Infrastructure fabric accounting is handled by managed objects that track user sessions and configuration changes.
Routed connectivity to external networks as a shared service billing and statistics
Describes the collection of billing statistics from ports configured for routed connectivity to external networks as a shared service in ACI.