Learn about Data Archive security

OpenID Connect (OIDC)

OpenID Connect (OIDC) offers claims-based authentication, a modern approach to user identification and authentication. OIDC is an identity layer built on top of OAuth 2.0 which allows a third-party application, an identity provider (IdP), to verify the user's identity before establishing a PI System connection. With OIDC, client verification is handled by the IdP. This approach ensures that only trusted parties gain access to Data Archive and PI System resources.

This security model improves Data Archive security, reduces your management workload, and provides users a single-sign on experience.

Windows integrated security (WIS)

Windows integrated security (WIS) allows you to manage Data Archive authentication through Windows and Microsoft Active Directory (AD).

The Windows integrated security model relies on Windows security for authentication, but provides its own authorization to PI objects. This is accomplished through two structures: PI identities for which you define PI permissions, and PI mappings that provide the mapping from Windows users and groups to PI identities.