Login Portal: Complete Guide

This portal is the single secure entry point. It dynamically adapts to your profile, your device, and your company’s security protocols.

The connection is handled through the Default.aspx form.


🟦 PART 1: End-User Guide

1. Connection Methods

Depending on your workstation configuration, you will use one of the following methods:

  • Internal Credentials (Fox4work): Enter a username and password created specifically for the application.

  • Network Credentials (LDAP): Use your standard corporate credentials (Windows/Outlook).

  • Automatic Windows Session (SSO): The system recognizes you without any input as soon as the page opens.

  • Badge Mode (Smartcard): Swipe your badge on the reader for instant identification.

  • Direct Link (QueryString): Click on a pre-configured link (received via email or a third-party portal) that connects you automatically without reaching the login screen.

  • Mixed Mode: You can choose between the badge or manual entry depending on your needs.

2. Post-Identification Workflow

Once recognized, the system may ask you to specify your context:

  • Company Selection (Firme): If you work for multiple entities.

  • Program Selection: Select the specific module (e.g., Stocks, Planning, Administration).


🟧 PART 2: Configurator Guide (Admin / IT)

This section details the technical settings in the Web.config file, URL parameters, and the variables in the INIT.Connection table.

1. Security Modes (Init.connection.G_Securite)

The G_Securite parameter defines the “source of truth” for access validation:

Value Mode Validation Source Technical Operation
0 Standard Local Base Uses only accounts stored in the internal table.
1 LDAP Directory (AD)

1. Checks credentials on the LDAP/Active Directory server.

 

2. If it fails, checks if “Mixed Mode” is enabled for this user.

 

3. If yes, attempts a connection via the internal table.

2 Windows Session (NTLM/SID) Seamless connection (SSO): uses the unique SID of the current Windows session.

2. URL Connection (QueryString)

The system accepts parameter injection directly into the URL to automate the login.

URL Format:

default.aspx?user=[ID]&password=[PWD]&firm=[SOCIETE]&miniprog=[PROG]

Accepted Parameters:

  • user / password: Standard credentials.

  • token: Unique security token.

  • firm: Company code to load.

  • miniprog: ID of the module to open directly.

  • hook_url: Return URL (used in Catalogue/Punchout mode).

3. Advanced Settings & Security

  • Mode Badge:

    • Web.config: Mode_badge:True : Hides the input interface for dedicated reader usage.

    • Web.config: Default_creation_user = True : Offers to create a profile if a badge is unknown.

  • Anti-Double Session Control: Init.Connection/G_Connection_control = 1 : Blocks the connection if the account is already active on another Hostname.

  • Encryption: The Web.config parameter User_Password_crypter defines whether passwords are compared in clear text or hashed mode.

4. Visual Customization (White Label)

  • Logo: Key Init.connection.G_logoPartenaire (Top left).

  • Background: Key Init.connection.G_LogoPartenairedroite (Right background image).

  • Cleanup: Default_cacher_statuts and Default_About_cacher to limit visible technical information.

5. Automation (UserExits)

The Espacel.dll engine generates events during each connection:

  • History: Recording via Historique_Logon.

  • UserExit: Triggers USEREXIT_Ecriture_evennement with value Logon : 9000 to interface with third-party systems (gate opening, siren, or external log).

  • Backup: init.connection.G_Mbackup = 1 launches a backup cycle at the first login of the day.