Exclude an identity provider from a role search

In certain scenarios, the AVEVA Identity Manager (AIM) can become unresponsive during a role search that is initiated by the AF Client through AF Server. To prevent a lockout from occurring, you can direct AIM to skip a role search for a particular identity provider.

The excludedProviders option is a manual setting used to skip or exempt a role search for an identity provider during the authentication process. This option is located in the AFService.exe.config file.

Note: Use caution when exempting an identity provider from the role search.

Perform the following steps to have the AVEVA Identity Manager exclude a role search for a chosen identity provider(s).

1. In Windows Explorer, navigate to the PIPC\AF folder on the PI AF Application Service computer.

2. Use a text editor to open the AFService.exe.config file.

3. Search for and locate the 'excludedProviders' setting in the AFService.exe.config file:

   </appSettings>

   ...

   <add key="excludedProviders" value=""/>

   ...

   </appSettings>

4. Enter the provider or list of providers separated by a comma within the parentheses after value=.

   Code example:

   <add key="excludedProviders" value="Windows, AzureAD, Microsoft EntraID"/>

5. Save your changes.

6. Restart the AF Service.