Security Profiles

<< Click to Display Table of Contents >>

Navigation:  Modules > Asset Management > Process > Catch Points >

Security Profiles

In order to make using a catch point screen as easy as possible, the screens were designed to authenticate themselves to the MIE (this means, usually, you are not challenged for credentials when clicking on a link that activates a catch point screen).

The links that active catch point screens are carefully designed to include several pieces of information, all encrypted, all of which must agree with each other.  If any of the pieces of information fail to agree, the user is presented with a blank screen, with no indication of why nothing is being presented, or any clue as to what should be presented.

Each customer should consider the security implications of having self-authenticating links, and weigh those implications against the obvious benefit of not requiring users to remember yet another user ID and password (as well as the effort required to manage the various accounts on the MIE).

If required, additional security can be placed on the catch point screens using Security Profiles.  A catch point screen can be assigned a specific Security Profile, allowing different screens to be handled differently (from a security perspective)

When a Security Profile is in place, any failure to pass through the Security Profile's settings while accessing the catch point screen will result in a completely blank screen being presented to the user.