Data Archive authentication methods

There are three methods you can use to configure authentication on the Data Archive server:

• Windows authentication

  You can set up Data Archive to automatically grant access to authenticated Windows users. To do this, you create mappings between PI identities (or PI groups or PI users) and Windows groups or users (AD principals or local Windows security). This is the recommended method.

• PI trusts

  PI trusts work by comparing the connection credentials of a connecting application to criteria you specify when you create the trust. For applications that cannot use Windows authentication, PI trusts are the recommended authentication method. See Create a PI trust.

• User accounts on the Data Archive server

  Each PI user account has an associated password. Nest PI users inside PI groups to manage access permissions.

  Note: This method is not recommended. Recently upgraded servers might use Windows for authentication but still have some individual PI user accounts and PI groups. However, for the best security, retire individual PI user accounts as soon as possible.