Connected experience user authentication

AVEVA Operations Control connected experience requires an AVEVA Connect account with Operations Control license mode configured, a valid Operations Control subscription and user management. Adding connected experience provides the following features:

• User authentication via a common user identity, configured and managed through AVEVA Connect, and understood and supported by all Operations Control products.

• All Operations Control products on this node will require log in authentication with AVEVA Connect when starting the first product on the node. Products on the node subsequently started will authenticate using Single Sign-on (SSO). AVEVA Connect-based authorization is the only security mode available under the connected experience.

• User authorization via roles, groups, Access Control List (ACL)-style permissions, and rules (allow or deny), configured and maintained within AVEVA Connect.

Important notes

• As a first step, contact AVEVA to purchase an Operations Control subscription.

• Set up your AVEVA Connect account with appropriate user management -- users, groups, and roles -- before you start with the connected experience.

• An internet connection must be available on all nodes in your system during operation under the connected experience.

• You must configure the System Management Server and configure AVEVA Connect as the Federated Identity Provider when enabling the connected experience.

• The connected experience must be enabled on all nodes in your system. Applications previously built on nodes not enabled for the connected experience may need to be reconfigured to function in the connected experience environment, including reconfiguration of application security.

• You can deselect the connected experience at any time, but the connected experience must be disabled on all nodes in your system. Applications built under the connected experience may require reconfiguration to function under a non-connected experience environment including both authentication methods and product licensing. Refer to your product documentation for specific reconfiguration requirements.

• Authentication uses an embedded browser pop-up dialog by default. If you prefer to use your system default browser, you can enable it on the System Management Server > Advanced > Authentication tab.

• Any product available through AVEVA Connect will participate in the single sign-on functionality as part of AVEVA Operations Control connected experience.