By default, users can only log into MeetingBooster using their MeetingBooster accounts. However, you can give users the option of logging using third-party authentication services. Depending on the options you enable, several authentication options can be enabled at the same time, letting your users choose how they want to log in. Some options, however, are mutually exclusive as described below.
Your use of third-party services for authentication or other purposes is governed by the terms of service of those third-party services as these may be updated from time to time. MatchWare assumes no responsibility for your actions on any website owned and operated by third parties, or for your use of accounts, IDs or other credentials created or used on such websites.
For more information on managing MeetingBooster user accounts, see "Viewing users" and all subsequent topics in the Managing users section of the Administrator Guide.
Click Settings and select Admin.
Click Authentication under System in the menu.
Click the tab of the authentication option you want to set up and enable.
Complete the set-up steps required on the selected tab, complete any additional procedures required outside MeetingBooster, and click Save.
See below for more information on each authentication option.
All third-party authentication options require you to set up an ID or other credentials with the third-party service in question. Since the set-up procedures for third-party services occasionally change, this documentation does not cover them in detail but only describes the procedures you need to follow in MeetingBooster. Please refer to the website or documentation of the selected service for detailed and up-to-date instructions.
Each authentication option may rely on browser cookies to work, and to keep users signed in.
This is the default login option. Users must enter the credentials of their MeetingBooster user profiles to log in. Using this option, users can log into MeetingBoster from any device that allows them to connect to the MeetingBooster site.
(Optional; only if Active Directory or Azure Active Directory authentication is enabled) Disable MeetingBooster authentication if you do not want your users to have access to this option.
If you enable Active Directory authentication but do not disable MeetingBooster authentication, users will be able to select if they want to use their MeetingBooster or domain (Active Directory) account on a drop-down on the Login button on the MeetingBooster login page.
Select whether users should be allowed to stay logged in, and for how long. If you deselect this option, users will not be able to select the Keep me logged in check box on the MeetingBooster login page.
Select how long users must be inactive in MeetingBooster before being logged out automatically.
If you have enabled the Keep Login feature (and users select the check box on their login page), users stay logged in until their login expires (because the time limit defined under Keep login for has been reached). They can leave and re-enter MeetingBooster as they wish without having to log in again (unless they actively log out).
If you disable the Keep Login feature, users stay logged in until they actively log out, or until the time limit for inactivity (Login Timeout) is reached, in which case they are logged out automatically.
This option allows users to log in using their domain login credentials; the credentials are checked against the local Active Directory service. This authentication option requires that MeetingBooster is hosted locally, and that you do not use Microsoft Azure Active Directory authentication. Using this option, users can log into MeetingBoster from any device that allows them to connect to the MeetingBooster site and sign into their domain accounts.
Enter the Active Directory domain, user name and password.
Select a Windows login type:
Disabled: There is no Windows button on the MeetingBooster login page. Users must sign in using their domain login credentials.
Enabled: A Windows button is shown on the MeetingBooster login page. Users who are already signed in using their domain login credentials (for example by logging into their Windows PCs) can click the Windows button to log in without providing any login credentials. Users who are not already signed in must provide their domain login credentials when clicking the button.
The browser uses Windows authentication to log the users in; you must configure user browsers to allow this authentication for the MeetingBooster domain. In addition, Windows authentication needs to be installed and enabled for the MeetingBooster website on the IIS server. For more information, see the documentation for the browser (or browsers) used by your users, and for the IIS server.
Exclusive direct: Users are automatically logged into MeetingBooster using their domain login credentials when they go to the organization's MeetingBooster site. If you select this, users can only use Active Directory authentication and cannot choose other login options.
Select whether MeetingBooster users and security groups should be synchronized with Active Directory, and enter the name of the Active Directory group to synchronize with.
There is no logout option in MeetingBooster for users who have signed in using their domain login credentials controlled by Active Directory. As long as the Active Directory login is valid, they can access and leave MeetingBooster as they wish. When they sign out of their domain accounts, they are also logged out of MeetingBooster.
For more information on Active Directory authentication, please refer to Microsoft documentation.
This option allows users to log in using their Microsoft accounts; authentication is handled by the web-based Microsoft Azure Active Directory service. This option requires that you do not use Active Directory authentication. Using this option, users can log into MeetingBoster from any device that allows them to connect to the MeetingBooster site and sign into their Microsoft accounts.
Enter the App ID and Tenant for the Azure Active Directory account to be used.
Select whether MeetingBooster users and security groups should be synchronized with Azure Active Directory.
Users who have already signed into their Microsoft accounts are automatically logged into MeetingBooster when they go to the organization's MeetingBooster site. Users who have not already signed into their Microsoft accounts are redirected to a Microsoft authentication service which handles the sign-in procedure. When they have been authenticated by Azure Active Directory, users are redirected back to the MeetingBooster site and logged in.
Users who log in using Microsoft accounts controlled by Azure Active Directory stay logged into MeetingBooster until they actively log out of MeetingBooster or sign out of their Microsoft accounts. Logging out of MeetingBooster also signs the user out of the Microsoft account, and vice versa. In order to log back into MeetingBooster, users must sign into their Microsoft accounts.
For more information on Azure Active Directory authentication, please refer to Microsoft documentation.
This option allows users to log in using their Google accounts by clicking a Google login button on the login page. Using this option, users can log into MeetingBoster from any device that allows them to connect to the MeetingBooster site and the web-based Google authentication service. Before using this option, users must associate the Google accounts they want to use for authentication as described in "Setting up calendar integration and Google options".
Enter the Client ID and Client Secret for the Google Client ID you have created on the Google Developers Console.
When creating your project on the console, pay special attention to the following:
Locate and enable the Google Calendar API, and include it using the Add Scope feature and the setting View, edit, share and permanently delete all the calendars that you can access using Google Calendar.
This step is necessary in order to enable Google calendar synchronization as described in "Setting calendar integration options".
When completing the Authorized Redirect URIs field, enter https://xxx/GoogleAuth/Callback, where xxx is the domain name of the MeetingBooster server.
Some fields on the Google Developers Console are case sensitive; pay attention to the casing you use in names and addresses.
When a user has signed into Google (before, or in the course of, logging into MeetingBooster), the user remains logged into MeetingBooster as long as the Google login is valid. When the user logs out of MeetingBooster, he or she is not signed out of the Google account.
For more information, please refer to Google documentation.