Secure InTouch Web Client access

Configuring the System Management Server (SMS) allows InTouch Web Client to be used securely with the https protocol. Additionally, after configuring the SMS, InTouch Web Client can be used with the AVEVA Identity Manager (AIM), to support non-windows based security and single sign on. As an administrator, there are multiple configuration options available for user authentication and security. Security and user management should work together. For more information, see Configuring User Access in Web Client.

Option 1: After you configure the System Management Server, enable the AVEVA Identity Manager (AIM). AIM is a standalone authentication server that exposes an OpenID Connect endpoint. To use AIM, you must register the client to the identity server. In the Configurator, you must configure Settings under AVEVA Web Client plugin. For more information, see Registering with the AVEVA Identity Manager.

Option 2: The Reverse Proxy option allows the InTouch Web Client to be accessed by users outside the OT network. Provide the FQDN of the reverse proxy server in the secure gateway field in the Configurator.