LogoLogo
DownloadGet a QuoteConnect with Us
  • Introduction
    • What is Thinfinity® Workspace
    • About this Document
  • Product Overview
    • Architecture Components
    • Load Balancing
    • Deployment Scenarios Overview
    • Connectivity
      • Remote Desktop Access
      • Remote Application Access
      • Terminal Access
    • RPAM and Resource Reservation
    • Cloud Manager
    • Audit Logging
    • User Analytics
  • Getting Started
    • Basic Installation
    • Accessing Thinfinity® Workspace in Your Browser
    • Connection Types
      • Remote Desktop Connection
      • Remote App Connection
      • Remote Intranet Web App Connection
      • Telnet SSH Connection
    • Configuration
    • Security
    • Beyond the Basics
  • Reference
    • Thinfinity® Workspace Configuration Manager
      • General Tab
      • Broker Tab
      • Authentication Tab
        • Methods Tab
          • API Access Settings
          • RADIUS Settings
          • SAML Settings
          • OAuth 2.0 Settings
          • External DLL
        • Mappings Tab
        • 2FA Tab
        • Directory Services Tab
          • Local Computer Users Settings
          • Local Computer Users
          • Local Thinfinity IdP Settings
          • Computer Domain Settings
          • External Domain Settings
      • Access Profiles Tab
        • The [+] Access Profile
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • ThinVNC Access Profile
          • VNC/RFB Access Profile
            • User Experience Settings
        • Application Access Profiles
          • Remote App Access Profile
            • Core Settings
          • Web App Access Profiles
            • Web Link Access Profile
            • WAG Access Profile
          • VirtualUI App Access Profile
            • Core Settings
        • Web Folder Access Profile
        • Terminal Access Profiles
          • z/Scope Classic Access Profile
          • Telnet/SSH Access Profile
            • Core Settings
            • User Experience Settings
        • Label
        • Access Control Settings
      • VirtualUI Tab
      • Folders Tab
      • Permissions Tab
      • Protection Tab
      • Notifications Tab
      • Database Tab
      • z/Scope Classic Tab
      • Services Tab
      • License Tab
    • Thinfinity® Workspace Web Manager
      • Access Profiles
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • VNC
            • Core Settings
            • User Experience Settings
          • Thinfinity VNC
            • Core Settings
        • Application Access Profiles
          • Remote App
          • Web App
            • Web Application Gateway (WAG)
            • Web Link
          • VirtualUI App
        • Web Folder Access Profile
          • Core Settings
        • Terminal Access Profiles
          • Telnet SSH Terminal
          • Multi Terminal
        • Access Control Settings - Web Manager
      • Addons
        • Analytics
        • Brokers Monitor
        • Audit Log
        • Recordings
        • Members
        • Reports
        • Resource Reservation
    • Thinfinity® Gateway
  • Configuration
    • RBAC and Resource Reservation
      • Configuring the Resource Reservation Feature
      • Role Definition with Permissions Groups
      • Granting Approver or Requester Role to a User
      • Enabling Resource Reservation
      • Granting a User Access to a Single Access Profile
      • Granting Access Permissions for a Group of Access Profiles
      • Grouping Access Profiles Under a Label
      • Restricting Access to a Resource
      • Exception Days - No Booking Allowed
      • Booking a Resource
      • Approving a Booking Request
    • Security
      • Managing the SSL Certificate
        • Creating a Self-Signed Certificate
        • Creating a CA Certificate Request
        • Importing a Certificate
        • Using ACME Certificates
      • Session Recording
        • Viewing Recorded Sessions
    • User Experience
      • Bidirectional Audio Redirection
      • Customizing the Thinfinity® Workspace Toolbar
        • Using web.settings.js
        • Using the SDK 'connect' Method
        • Extend the Thinfinity® Workspace Toolbar
      • Customize Translation
      • GFX and H.264 Support
        • Enabling H.264 for an Access Profile
        • Preparing a Remote Desktop for H.264 Support
      • How to Enable Multi-Monitor
      • Multi-Touch Redirection
      • Redirecting Devices
      • Remote FX
      • Enhanced Browser and DPI Support
        • Display Model Inheritance
        • Properties Reference Tables
        • The Calculation Process
        • Example
    • Extended Features
      • Remote Active Directory
        • How to Install and Configure Thinfinity® Remote AD Services
        • Active Directory Credentials Mapping
      • WebBridge - Direct File Transfer
        • Installing Thinfinity® WebBridge
        • Using WebBridge
      • Silent Install Options
    • License Server Manager
      • Proxy Activation
      • Get a New Trial Serial Number
      • Activate a Serial Number Online
      • Activate a Serial Number Offline
      • Registering a License with License Server Manager
  • Deployment Scenarios
    • Single Machine Deployment
    • Distributed Deployment
    • Multitenant - Several Subdomains
    • Implementing Secondary Brokers Scenarios
      • Resource Pools
      • OT Networks
      • Multitenant - Single Domain
  • Integrations
    • Integrating Thinfinity® Workspace
    • External Authentication
      • API Key
    • Customizing the Web Interface
      • Customizing the Logo
      • Organizing custom files
    • One-Time-URL (OTURL)
      • Customizing OTURL Connection
      • Enabling Features
  • Mobile Devices
    • Mobile Devices
    • Accessing Thinfinity® Workspace
    • Mouse Control
    • Keyboards and Toolbars
    • Gestures
Powered by GitBook
On this page
  • System level security
  • Access profile level security
  • User level security

Was this helpful?

  1. Getting Started

Security

PreviousConfigurationNextBeyond the Basics

Last updated 3 months ago

Was this helpful?

Security settings can be implemented in Thinfinity® Workspace at system level, at access profile level and at user level.

System level security

At the system level, the security is ensured by the authentication methods, by controlling user access to specific modules of the app and by defining access restrictions based on IP.

Authentication Methods

The default authentication method in Thinfinity Workspace is the Windows logon: you can log on with your Windows credentials used to access the computer where Thinfinty is installed.

For details on other supported authentication methods and how to set them up, see and the section in our online Knowledge Base.

Permissions

You can define which are the Thinfinity Workspace modules that a specific user can access. To do that, navigate to Thinfinity Workspace Configuration Manager>Permissions tab.

  1. Add the user to the list of Users and Groups.

  2. From Permissions select the app module where the user will have access.

  3. Customize the Connection settings then click Appy to implement the changes.

Protection

You can define whitelists and blacklists for the IPs that connect to the system.

To configure these lists, navigate to Thinfinity Workspace Configuration Manager>Protection tab.

  1. Select Enable brute force detection to protect your installation from this type of attack then set the maximum number of login attempts and the time interval after which the system will become available again.

  2. Use the Allow list and the Deny list tabs to define the corresponding IP lists.

  3. Make sure to click Apply to implement the changes.

Access profile level security

You can define specific roles or permission groups and allow access to the access profile according to the role/permission group assigned to a specific user. To do that, navigate to Configuration Manager>Access Profiles then select the access profile you want to configure and the from the profile editor select the Permissions tab.

  1. Click on Permission Groups to define roles and permissions group according to needs.

  2. Add a user to the Group and user names list then, from the associated Permission Group field, select the group to which you want to assign the current user and click OK.

  3. Remember to click Apply to save the changes.

User level security

In order to access a profile, the user will have to provide a set of credentials. Exactly which set of credentials are necessary for a user to access a profile can be set from the Credentials section in the General tab of the access profile editor.

To do that, navigate to Configuration Manager>Access Profiles tab then select the access profile you want to configure. In the General tab, in the Credentials section you can choose one of the following options:

  • use the authenticated credentials

  • ask for new credentials

  • use these credentials

Make your choice according to needs then click OK.

Remember to click Apply in the Thinfinity Configuration Manager to apply the changes.

Authentication Tab
Authentication