Allegro User Authentication and Session Management

Aria Allegro uses the core Aria framework for authentication and authorization. The following steps describe what happens when you start a new Allegro UI session:

1. User login: When you enter your user ID and password, Allegro UI uses the Key Cloak shared service to authenticate you. If you have an active session with a core Aria UI, the client from that session becomes the default.
2. Core Aria API calls: After authentication, Allegro calls the core Aria API to retrieve:
   • User permissions and role: Core Aria configurations map to Allegro permissions for each role type. A static mapping in Allegro determines your full permission set. The permission map is automatically inserted for new deployments when a client is added.
   • User list of clients: Allegro retrieves the list of clients accessible to you in the deployment. Not all clients are enabled for Allegro by default. If you access more than 50 clients, the API fetches the full list using pagination. The matched list of Allegro-enabled clients determines which clients you can select and switch between in Allegro UI.
3. Session management: Allegro UI session management matches the core Aria UI framework. Sessions last 15 minutes and renew in 15-minute increments. Sessions expire after a period of inactivity.
4. Tokens: Allegro UI uses tokens to authorize API calls to Allegro services. Tokens are valid for two minutes. Allegro UI automatically refreshes tokens as needed.