Local User Accounts

Local user accounts are accounts that always authenticate against Xpress Insight irrespective of whether LDAP is enabled or not. This allows LDAP to be configured whilst still allowing access into Xpress Insight.
Whether a user account is local or not is controlled via the Local account checkbox against the user details. See http://www.fico.com/fico-xpress-optimization/docs/latest/insight/javascript_api/index.html.
Note Changing this value against the user can only be performed if the LDAP configuration Local accounts enabled checkbox is selected.

After LDAP is enabled, de-select the LDAP configuration Local accounts enabled checkbox to prevent any user assigned a Local account from logging in to Xpress Insight.

In certain circumstances, for example when the LDAP system password changes and LDAP integration needs to be reconfigured, users will not be able to log in if local accounts are disabled. In this situation local account authentication can be enabled via a configuration file, overriding the Local accounts enabled setting in the UI:

  1. Stop the Xpress Insight server.
  2. Edit the following file in a text editor: <XPRESSDIR>\insight\server\wildfly-15.0.1.Final\standalone\configuration\standalone.xml
  3. Find the line declaring the property allowLocalAccountAuthentication and set its value to true.
    <system-properties> <property name="allowLocalAccountAuthentication" value="true"/>
  4. Save and close the file.
  5. Start Xpress Insight.
  6. Log in using a local account.
    Note This would only be used in exceptional circumstances, it is recommended to revert this setting once LDAP connectivity has been restored by setting the property to an empty value:<system-properties> <property name="allowLocalAccountAuthentication" value=""/>
Parent Topic Authenticating Users with Active Directory or LDAP