Using the latest JFrog products?
JFrog Platform User Guide
JFrog Xray 2.x Documentation
To get the latest version, go to the JFrog Unified Platform
Without an Authentication Provider
If no authentication provider is configured in Xray, only users defined in Xray can log in according to the credentials defined for them within Xray as described under Managing Users. Clearly, in this case, you can also only specify Permissions for internal Xray users.
With an Authentication Provider
If Xray is configured with an authentication provider then it will try to authenticate a user according to the authentication mechanism configured for the corresponding Artifactory instance. In this case, you can also specify Permissions for users defined in the LDAP/Crowd or SAML server of the Artifactory instance set as the authentication provider, as well as for the authentication provider's internal users.
Using SAML
If the authentication provider uses SAML SSO, then the Xray login screen will display a button that the user can use to log in and will be authenticated against the SAML server configured in the corresponding Artifactory instance.
SAML is not compulsory
Even if Xray is configured with an authentication provider that uses SAML, a user can try to login by entering her username and password. In this case, Xray will authenticate the credentials as described in Order of Attempting Authentication.
Using LDAP/Crowd
If the authentication provider uses LDAP/Crowd, then the user will enter login credentials using the Xray login screen, but will be authenticated through the LDAP/Crowd server configured in the corresponding Artifactory instance. If authentication fails, Xray will then try to authenticate the credentials provided as described in Order of Attempting Authentication.
Using LDAP/Crowd and SAML Together
While it is not a typical scenario, an Artifactory instance that has been set as the authentication provider for Xray may be configured with both an LDAP/Crowd and a SAML server. In this case, the Xray login screen will display a button that the user can use to log in and will be authenticated against the SAML server.
If the user prefers to enter login credentials, Xray will try authenticate her through the LDAP/Crowd server configured in the Artifactory instance set as the authentication provider. If authentication fails, Xray will then try to authenticate the credentials as described in Order of Attempting Authentication.
Configuring an Authentication Provider
You can set any of the Artifactory instances to which Xray is connected as the Authentication Provider.
Selecting an Authentication Provider
To set an authentication provider, in the Admin module, select Security | Authentication.
In the Authentication screen, under Authentication Provider, the Authentication Instance field displays the connected Artifactory instances. Select one of those instances to be the authentication provider.
Once the authentication provider is set, Xray will authenticate users logging in as described above.
SAML Auto Redirect
When set, Xray will try to log the user in through SAML. If the user is already logged in through SAML (through the connected Artifactory instance, or any other application), Xray will automatically log him in using the same SAML server for authentication. If the user is not logged in, Xray will display the SAML login screen.