Page History

Windows Authentication

...

You can easily integrate and leverage your company's Active Directory Domain Services (AD DS) with FactoryStudio. Using AD DS, you can easily setup security and permission settings for users and groups within your project. 

For more information about Active Directory, view this link to a Microsoft article.

To enable Windows Authentication in your project, please go to Info>Project>Redundancy and select the checkbox “Windows Authentication”.

...

When using Windows Authentication, the a project's user management is disabled and is controlled by Windows. The project will use the Windows User user that is logged in into the computer will be the one used in the system.. 

When you are using client instances, the server computer is the one that will validate the User user for the client. Then, the Windows User The server computer needs to have the same Windows user as the one that is logged in into the client computer needs to exist on the server computer and , and they must both be in the same domain group. 

After the user validation, the user’s Windows group will determine which project Security Permission will be used. It will search in the project Security Permission for the same Windows Group name. If it found exactly finds the exact same name then , the Security Permission will be used in the project for the logged in User. If any names do not match, the Permission Guest will be used.

It is important verify the port that You need to verify which port is being used in the project for the Windows Authentication. The Clients By default, clients will use by default the 3102 port. However, this can be changed in the command line or URL when starting the Clientsa client display. 

Example of  TSmarClient the TSmartClient URL using Windows Authentication:

http://127.0.0.1/fs-2016.2/TSmartClient.application?port1=3102&wa=true

...

LDAP Server

To enable the LDAP Server in FactoryStudio, please go to…to Info>Project>Settings. Then, and type the LDAP Server server's name in the AD/LDAP Server field.

For To integrate the integration of the LDAP Server any extra customization in the project is needed except for the LDAP Server name in the Info>Project>Settings., the only customization that you need to do is use the AD/LDAP Server under Info > Project > Settings. 

The After enabling the LDAP Server the project Client.LogOn() method in the LOGON page will work property. This method when properly after enabling the LDAP Server.

When this method is called, firstly it checks for will check the project Engineering Users if not for an Engineering user. If none are found, then it checks the project Runtime Users and  finally if there is a LDAP Server configured it checks for the LDAP Users. When the first User it will check for a runtime user. If no runtime users are found, it will check for a LDAP user if the LDAP Server is configured. The first user that is found and validated the found User will be the user that is logged in into the project. 

After As in the Windows Authentication, after the user validation, the user’s Windows group will determine which project Security Permission will be used. It will search in the project Security Permission for the same Windows Group name. If it found exactly finds the exact same name then , the Security Permission will be used in the project for the logged in User. If any names match, the Permission Guest guest permission will be used.