Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section

The error message angle


Column
width50%

Off: Users will get a 'no access' message from the resource

Advantages:

  • You do not need to manage permission sets or their allocation beyond the default set for the role attribute 

Disadvantages:

  • Some error messages are better than others
Column
width50%

On: Users will get a 'no access' message from OpenAthens

Advantages:

  • Consistent error message for resources you have not allocated

Disadvantages:

  • Only works for resources in the same federation(s) as you
  • You need to manage resource allocation to permission sets (in each of your sub-organisations)
  • You need to manage permission set allocation to accounts (in each of your sub-organisations)

How to turn it on or off

First make sure that all of your users have permission sets assigned and that those sets contain the relevant resources. Don't forget to include MyAthens. If you are using local accounts you'll want to do this a day or more before. 

Restrictive mode is a per-organisation setting so is set on the organisation preferences page (Preferences > Organisation).The  The setting is at the bottom of the page. Once you save the page the change will take a few minutes to propagate to our authentication points.  You will need to repeat this for each sub-organisation that you haveRepeat for any sub-organsaiton where you want it to apply.

The advantage of this being a per-organisation setting is that you do not need to have restrictive mode turned on (or off) for all the users across your domain - a mix is possible if that would suit you better.

...