DataHub Connection & Configuration Security 

Extensive & Robust Security for Configuration & Data Access

DataHub has always had extensive security for read, write, create, delete, remote config access, data access & tunneling, and role based permissions. With V11 forward, security has been even further enhanced. There's so much power, if you'd like to discuss your needs, please request a consultation, but also visit our deep dive blog post on DataHub V11 security.

• Warnings about potentially unsafe configuration and account settings
  
• When changes are being made, they are highlighted in red to make it very obvious what you are changing before you commit the changes
• Expand beyond local DataHub accounts by integrating Active Directory Users via LDAP to delegate authentication to your Active Directory Security Model
• MFA & Time Based One-Time Passwords (TOTP) with QR code generation & support for popular authentication apps
• Access rights by principal - IP, CIDR, connection protocol with different roles for each principal
• Role based Permission Set Assignment 
• Permission sets group rights for scalable management
• Effective permissions view helps you check for unintended results 
  
• Password age tracking 
• Change report to review changes before activating changes

Flexible User Types & MFA/TOTP Authentication

DataHub has always had it's own local user database. With V11 forward you can also reference local Windows users or users in Active Directory via LDAP or LDAPS (Secure) to delegate authentication to your Active Directory security system, and then assign them to DataHub security roles which in turn reference permissions sets for scalable management.  You can also enable MFA, and more. Those users then can be used in remote configuration sessions, Webview access for view or modify and more. 

Restrict Remote Configuration Access

If you choose to use the remote configuration user interface locally or remotely, you can set permissions that control what features your users have access to, and layer that with the rest of the DataHub permissions to control who can configure the application.

From V11 forward, you can also require users to use Multi-Factor Authentication (MFA) using Time-Based One-Time Passwords (TOTP)