Create an OIDC role mapping

You can use PI Builder to set the authentication method for a new mapping and specify role mappings. If you are using claims-based authentication via OpenID Connect (OIDC), you will need to set the MappingType column to OIDC and also enter each user's role ID in the MappingAccountName column.

Before you can create Open ID Connect (OIDC) role mappings, Specify a Data Archive server.

1. On the PI Builder tab, select Security, select Data Server and then select All PI Identity Mappings.

   Note: Make sure to select the MappingAccountName column header. This column is used to set the role ID. Data Archive uses the role ID value to determine permissions at sign on.

2. In the Select Object Types and Column Headers window, select the objects and column headers to include in the worksheet, and then click OK.

   PI Builder populates the spreadsheet with the PI identity column headers.

3. Prepare your worksheet for publication:

   1. In the ObjectType column, enter PIIdentity

   2. Place notes and values that you do not want to publish in columns without headers.

   3. Place blank rows and columns appropriately.

      PI Builder publishes data row by row, but processes no rows after encountering two entirely blank rows and processes no columns after encountering two entirely blank columns.

4. Place an X in the Selected(x) column of any row that you want PI Builder to process.

   PI Builder ignores rows without an X in this column.

5. In the MappingType column, enter OIDC for each role mapping.

   In the MappingAccountName column, enter the role ID of each user.

6. On the PI Builder tab, click Publish.

7. In the Publish Options window, enter the settings that control PI Builder actions during publication: Create and Edit, Create Only or Edit Only.

8. Select OK to start publishing.

   The Publish Selected Objects window shows the operations completed.

9. Select Close.

   PI Builder automatically checks in any changes when you publish.