Configure CONNECT for authentication

You can configure the AVEVA Mobile Operator to use CONNECT to authenticate the users. To do this, you need to configure Platform Common Services (PCS) 8.0.2 or later with CONNECT as Identity Provider (IDP).

1. Log in to CONNECT using the AVEVA credentials.

2. From the main menu, select Integrations.

3. On the Integrations page, click the Applications card. The Applications page that lists the existing applications is displayed.

4. Click Create application.

5. On the Create application area, do the following:

   1. In the Name box, enter a name for the application.

   2. (Optional) In the Description box, provide a description or the application.

   3. From the Type list, select the type PCS On-Premises Identity Integration.

      Note: If you do not see this option in the list, contact CONNECT support.

   4. In the Redirect URLs box, specify the following URLs to which the users must be redirected.

      https://<FQDN>/identitymanager/signin-avevaconnect

      Note: CONNECT cloud application redirects are case-sensitive.

   5. In the Logout URL box, specify the following logout URL for your application.

      https://<FQDN>/identitymanager/signedout-callback-avevaconnect

      Note: CONNECT cloud application redirects are case-sensitive.

6. Click Save. The application is added to the list of the existing applications. The Status column displays the status of the application.

   Note: The application is created after the Status column displays Active and the Client ID column displays a value. Save the Client ID as this will be used later for registering with Platform Common Services.

7. Navigate to Integrations page and click Access Tokens card to generate the access token that will be used for PCS registration.

   The Create Access Token page appears.

8. In the Create Access Token page, do the following:

   6. For the Description box, provide a description for the access token.

   7. For the Date that token should expire box, select a date on which the token must expire.

   8. For the Access Token Configuration box, select Advanced to assign more than one role to the access token.

   9. To create an account level access token, select Account access token. Then choose the roles that you want to apply to the token.

   10. In the Roles box, choose the role On-Premises Identity Integration (AIM) that you want to apply to the token.

       Note: If you do not see this option in the list, contact CONNECT support.

   Click Create.