This section outlines inVia's security features that are recommended to be implemented to secure the overall deployment.
Authentication
Authentication-focused security controls involve any feature that addresses the issue of a user identifying themselves prior to accessing or editing a system.
inVia systems have several features to help add authentication measures to deployments.
Local users or customer users
All customers using inVia Warehouse Management have users that are created locally and are authenticated using local databases.
Local users can easily be created in the inVia system, and these users have several settings that can be leveraged to secure the deployment.
inVia support and engineering users
During the initial setup, inVia sets predefined support and engineering users to connect the system for triaging and monitoring purposes.
Those users are all authenticated using the internal inVia LDAP server.
inVia uses the FreeIPA directory service built on the 389 DS LDAP server for this LDAP authentication.
User creation and username uniqueness
inVia enforces unique usernames and passwords (which is helpful for accounting) and enforces password requirements to prevent using insecure passwords.
A User can be created from the inVia logic main screen under Users > Create User (Add Row).
When creating a new user, inVia does not allow the creation of a user with the same username as an existing account.
![Create User](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/create-user=GUID-4057C234-2FCB-4C66-8FF9-BD3758419F3B=1=en-us=Low.png)
Change password
The warehouse manager or administrator can change a user's password securely through the Logic UI by selecting the user.