Create a subject mapping

Subject mappings are used to assign a single user to a PI Asset Framework (AF) identity using OpenID Connect (OIDC) authentication. The authentication process verifies the user's identity as well as access and permissions to AF server. Subject mappings may also be created for PI identities.

Important: While subject mappings can be created in PI Builder, AVEVA highly recommends using role or group-based security in place of subject mappings to ensure scalability and manageability.

Before you can create a subject mapping, Specify a database and Specify a Data Archive server.

1. On the PI Builder tab, select Security, select Asset Server and then select All Security Mappings.

   Opens the Select Object Types and Column Headers dialog.

2. Select OK.

   PI Builder populates the spreadsheet with the security mapping column headers.

   Note: The following Security Mapping column headers are required to create subject mappings: MappingIdentity, MappingAccountName, and MappingType.

3. Place an X in the Selected(x) column of any row that you want PI Builder to process.

   PI Builder ignores rows without an X in this column.

4. Update the following fields in the worksheet for each subject mapping you want to create:

   1. Name: Assign a name for the subject mapping.

   2. ObjectType: SecurityMapping (this field is automatically added at publishing).

   3. MappingIdentity: Name of the PI AF identity that the user will be assigned.

   4. MappingAccountName: Enter the domain and user name for the subject mapping following this format: sub:<Domain>\<User>

      • Replace <Domain> with the assigned domain of the user.

      • Replace <User> with the user name.

   5. MappingType: OIDC

5. On the PI Builder tab, select Publish.

6. In the Publish Options window, enter the settings that control PI Builder actions during publication: Create and Edit, Create Only or Edit Only.

7. Select OK to start publishing.

   The Publish Selected Objects window opens after the operation is finished.

8. Select Close.

   PI Builder automatically checks in any changes when you publish.