Home
Welcome to Cleo Clarify v5
Cleo Clarify supports every phase of business integration – building, integrating, and maintaining – in one simplified, streamlined product. An individual may create, test, and deploy integration processes from beginning to end, or Clarify can be used by teams with multiple participants and roles – including business analysts, developers, and IT operations personnel.
System Maintenance
The following topics discuss guidelines, provide recommendations and best practices, and explain available tooling which support good system management and health for your Clarify environments. Topics cover everything from backups and upgrades, to data purging and daily operational maintenance.
Security
This topic discusses different security features available.
Access Control
Access Control provides remote Server security through the creation and configuration of role-based user permissions (profiles). A dedicated Admin Console view allows you to enable or disable users from having access to specific server functionality, and provides an easy-to-use interface for managing users, roles, and passwords. Optional Lightweight Directory Access Protocol (LDAP) authentication can also be configured to allow users to log in using their established network credentials.
LDAP Integration
Access Control also provides LDAP integration support for two common authentication service providers: Active Directory and Apache DS. LDAP groups are mapped to Clarify roles, thereby integrating the two systems and providing additional authentication and authorization to Clarify. With successful LDAP integration in place, users can sign into Clarify using their network credentials, which will be directly mapped to their respective role/permission levels in Clarify. This is how single sign-on can be implemented with Access Control.
Defining LDAP Profiles
Defining an LDAP profile establishes the LDAP server connection, creates mappings between LDAP groups and roles, and activates the actual integration with Clarify.
Enable the LDAP profile

Enable the LDAP profile

LDAP profiles in Clarify, by default, are not active until manually enabled. This can be done by selecting the Enabled radio button found in the LDAP Profile Details' Status section. Once enabled, the LDAP profile now becomes an active integration between Clarify and the LDAP server.

Best Practice: Always test the server connection before enabling the profile.

Note: Only one LDAP profile can be enabled at a time; by enabling one profile, Clarify automatically disables all others. Disabling an active LDAP profile can impact all related users currently signed into Clarify. Users will be automatically logged out, and will be required to log back in. Logout also occurs if changing the configuration of an enabled profile. Administrators must consider and plan for this potential impact to users any time an existing LDAP profile is either edited, enabled, or disabled.