When you add a user in Robot Manager, the authentication method for the user is determined by their access roles and the following dynamic system settings:

DefaultAuthenticationTypeForRuntimeOnlyUser

Determines the authentication method for users whose access group includes only the RuntimeUser access role. This setting does not apply to access groups that include more access roles in addition to RuntimeUser.

DefaultAuthenticationType

Determines the authentication method for access groups that do not meet the conditions for the DefaultAuthenticationTypeForRuntimeOnlyUser setting. For example, this applies to access groups that include Admin, UserAdmin, RobotAdmin, ReportAdmin, and Developer access roles.

For more information, see Default access roles.

1. Specify the default authentication method for the RuntimeUser access role:
   1. In Dev Studio, click Records SysAdminDynamic System Settings.
   2. From the list of dynamic system settings, select DefaultAuthenticationTypeForRuntimeOnlyUser.
      Tip: Alternatively, use the Dev Studio search bar to quickly navigate to the setting that you want to update, as shown in the following example:

      

      

   3. On the Settings tab, enter one of the following values:
      BasicSSO
   4. Confirm your configuration by clicking Save.
2. Specify the default authentication method for user roles other than RuntimeUser:
   1. In Dev Studio, click Records SysAdminDynamic System Settings.
   2. From the list of dynamic system settings, select DefaultAuthenticationType.
   3. On the Settings tab, enter any of the following values:
      BasicSSO
   4. Confirm your configuration by clicking Save.
3. If you configured any user role to authenticate by using the basic method, provide the temporary password for the first login:
   1. In Dev Studio, select RecordsTechnicalActivity.
   2. From the list of activities, select pyGetGeneratedPassword.
      You can quickly browse the activity list by filtering the Activity Name column.
   3. On the pyGetGeneratedPassword form, click Save as to specialize the rule in your application layer.
   4. On the pyGetGeneratedPassword form, click the Parameters tab.
   5. For the generatedPassword parameter, populate the Default value field with the temporary password for basic authentication users, as shown in the following example:

      

      

   6. Confirm your settings by clicking Save.
   Result: When a basic authentication user logs in to Pega Platform for the first time, the application prompts that user to enter the temporary password and then to provide the new password. If any login issues occur, users can click the Forgot password? button to get a new temporary password.