Configure Operations Control connected experience

To operate InTouch and other System Platform products under AVEVA Operations Control, either as a product subscription only, or with Operations Control connected experience, you must configure your installed and licensed products. It is still required to configure a license server for the headless services to work properly.

For more information refer to:

• Configurator Help

• AVEVA Identity Manager Help

To configure Operations Control connected experience:

1. Open the Configurator from Start > AVEVA > Configurator.

2. Select License Mode in the left pane to configure license mode.

   1. Select AVEVA Operations Control radio button to subscribe for at least one of two AVEVA Operations Control packages (Edge and Supervisory); that includes unlimited use of all products in the product package for your defined set of users.

   2. Select connected experience check box to enable a Single Sign-On (SSO) experience across all Operations Control products on this node with CONNECT cloud capabilities, available in the products by default.

   

3. To configure the System Management Server, in the left pane, under Common Platform, select System Management Server.

   Note: If you are prompted for user credentials for the System Management Server, use the following format to enter the user name: DomainName\UserName. The prompt for user credentials may be displayed if you have domain admin privileges but are not an admin on the local machine. You must be a member of the Administrators or aaAdministrators OS group to configure the System Management Server.

   1. To connect to an already existing System Management Server, select the Connect to an existing System Management Server. From the list of System Management Server available, select the required System Management Server. Note that the list displays all machines on the network that have been configured to function as System Management Server. In most cases, there is only one System Management Server.

   2. To configure a machine as a Redundant SSO (RSSO) server, under Connect to an existing System Management Server, select Configure this machine as a Redundant SSO Server.

      OR

   3. To configure the current machine as a System Management Server, select This machine is the System Management Server option.

   4. Click Configure.

   Note:

   - No System Management Server configured option is not supported for Operations Control connected experience. You must configure a System Management Server to use Operations Control connected experience.

   - Only one of the machines in the network is identified and configured as a System Management Server. Machines running AVEVA products can then connect to that single System Management Server to establish trust and configure encrypted communications.

   - Configuring Redundant SSO does not configure a separate System Management Server.

   

4. To configure Federated Identity Provider, in the left pane, under Common Platform, select Federated Identity Provider.

   The Identity Manager component in the Platform Common Services (PCS) Framework available on the System Management Server (SMS) and Redundant SSO (RSSO) machines can be configured for "federated" login with CONNECT. This means that a user can enter their email address as registered with an CONNECT account into the Identity Manager login form, at which point they are redirected to CONNECT so they can log in. At present, for Operations Control connected experience, only federation to CONNECT is supported and Azure AD is not supported.

   Note:

   - For a federated identity connection, you need a valid CONNECT account, and you must be an administrator on that account.

   - This step only applies to the node where This machine is the System Management Server is configured. If a node is connecting to an existing System Management Server, configuring the Federated Identity Provider is not required.

   

   If you have multiple CONNECT accounts, then after the authentication, an Account selection dialog listing multiple CONNECT account name that you are part of will be displayed. Select the account that you want to be federated with and from that point onwards the machine and all the Operations Control products will be authenticated or validated for subscription for that selected account.If you are part of only one CONNECT account, then the account selection dialog will not be displayed.

5. To Configure the InTouch Web Client to use User Authentication, in the left pane, under Industrial Graphics Server > Authentication Settings, select User Authentication and then click Configure.

   

6. To register System Platform with AVEVA Identity Manager, in the left pane, under AVEVA System Platform, select Identity Manager Registration.

   Register AVEVA System Platform with Identity Manager only after you have completed the System Management Server configuration.

   Click the Configure to register with Identity Manager.

   

7. To register InTouch with AVEVA Identity Manager, in the left pane, under AVEVA InTouch HMI, select Identity Manager Registration.

   Register InTouch HMI with Identity Manager only when you have completed the preceding steps.

   • You have enabled AVEVA Operations Control connected experience as your license mode.

   • You have configured the System Management Server.

   • You have selected CONNECT in the Federated Identity Provider.

   Click the Configure to register with Identity Manager.

   Note: If you have not configured System Management Server (not recommended), you can still configure InTouch, but cannot use Operations Control connected experience.