PI trusts

A PI trust compares the connection credentials of a connecting application to criteria specified in the trust. Each PI trust is defined against a PI identity, a PI group, or a PI user. The trust gives the connecting application the same access permissions as the associated identity, group, or user.

Before Data Archive 2016 R2, trusts were typically used to authenticate PI interfaces. Windows authentication extends to PI interfaces through PI API 2016 for Windows Integrated Security.

Using PI trusts or explicit logins for authentication is not recommended. For a more secure environment, OpenID Connect (OIDC) or Windows Integrated Security (WIS) is recommended.

Note: PI API 2016 for Windows Integrated Security extends Windows authentication to API-based client applications. If you choose to install PI API 2016 for Windows Integrated Security, you can use only Windows Integrated Security for authentication. Both trusts and explicit logins will fail. For more information, see Overview of Data Archive security.