Login and Active Directory
There are different authentication levels in Workcube to log in to the system securely. Standard, Recaptcha, Active Directory and Google Authentication are available. The login screen of a system is the most important point for security. There are many methods that can be applied for password and login system security on Workcube.
Encryption
Security standards for user passwords are defined under the System > Security module. It is recommended to use complex passwords for system security.

Password Complex: Password A complex password consisting of small / large / numbers / special characters can be created.
Password Length: The minimum number of characters that the password should consist of is set.
Password Change Interval: It monitors the password change interval of the users and asks the users to change their passwords at certain intervals.
Number of Old Password Checks: The number of times a user can use the same password retroactively is set.
Maximum Number of Incorrect Entries: It is determined how many times the user or those trying to enter the system can enter an incorrect password. If the incorrect login continues, the IP and cookies are checked and banned.

System Login and Recaptcha
Log in by entering the Username and password. Recaptcha helps prevent the site from becoming unusable (inaccessible) by preventing overloaded, meaningless and fake messages that can be sent by malicious robots. To activate this feature, the value must be set as recaptcha = true on the System > General Settings > System Parameter Settings page.
Forgot My Password
When the user forgets his password, the user clicks on the "forgot my password" function on the login screen. Enter Username and E-Mail. After system verification, the system generates a new password and sends an e-mail to the user in accordance with the encryption rule.

User Login Restriction and Login Right for a Certain Period
Users can be prevented from logging into the system based on position type from the System > Security > Employee Login Restriction screen. By setting the Last Login Date to the System from the employee detail screen, the user can be prevented from logging into the system again after that date.
Active Directory
Workcube is a software with a web-based architecture. It works on browsers. However, Windows operating systems do not directly send information in the ActiveDdirectory structure to websites. This may cause security vulnerabilities. Therefore, users who want to log in directly with Active Directory must define their Workcube domain as a secure website.
Situations to be considered
- Setting the Parameter Settings correctly
- Ensuring that the Workcube username and Active Directory username are the same
- To ensure that there are no problems preventing communication with Active Directory via the Workcube server.
Definitions
systemParam.use_active_directory = '1';
If the value is 1, employees can connect to the workcube system with their Active Directory username and password.
If the value is 2, they will automatically log in to the workcube as soon as the Workcube address is written in the browser. There is no need to fill out any login forms.
If the value is 3, logins can only be made with Active Directory. Login cannot be provided with the Workcube password.
active_directory_server = '127.0.0.125';
This value is given as an example. The server IP address where we will check the Active Directory users and passwords is written here.
active_directory_server_add = "';
This value is written if there is any definition or localnetworkname used before the username when connecting to the Active Directory server. Otherwise, it is left blank.
active_directory_start = 'cn=users,dc=domain';
active_directory_atrr = 'cn,sn,mail';
The above 2 values should remain as standard. They cannot be changed except in special cases.
In order to log in directly from the browser in the Active Directory system, the site's ActiveX settings must first be made.
After these settings, it will be automatically entered into the Workcube system. log in.
Attention: User password update screens and widgets do not appear on systems integrated with Active Directory.
Feedback
The desired algorithm is also used for password determination and renewal in order to log in to the system securely.