Product administration

Administer the XPLG console itself: activate security, manage users, groups and policies, scope permissions per folder, log, app and AppTag, and sign users in through Active Directory, SAML, OAuth, Kerberos, SiteMinder, WebSeal or a header-asserting proxy.

This section is about administration inside the XPLG product — the users, groups, policies, permissions and sign-in methods configured under PortX > Settings > System Settings > Security and the Security menu of the console. The consoles are the product's own and are documented once for both generations; the X8 deployment pages describe no differences. Administration of your dock workspace (members, roles, dock single sign-on, account security) is a different thing and lives under Administration (sign in to read).

  • Security in the product — activate security, the internal and external realms, the Users → Groups → Policies model, what administrators can do.
  • Users — add, modify, lock, unlock and remove local users; the user's own password and display name; the SDK command.
  • Groups — role containers, nested and administered groups, the All and Administrators groups, groups that mirror your directory.
  • Policies — the permission sets, the View-Only baseline, how a user's policy is resolved.
  • Folder, log, app and AppTag permissions — View and Edit roles per resource, inheritance from the parent or the application, what apps and dashboards show, AppTag-scoped access.
  • Active Directory and LDAP — the connection settings, verifying group retrieval, mapping directory groups to policies.
  • SAML, OAuth and SSO gateways — SAML 2.0, OAuth and OpenID, Kerberos, SiteMinder and WebSeal, header-based SSO behind a reverse proxy.
  • Sessions and authentication chaining — the idle timeout, the primary and secondary authentication types, lockout and passwords.

The security program these settings implement — least privilege, MFA at the identity provider, audit — is summarised on Security posture.