Windows authentication versus SDK trusts

If a Windows user running an SDK application has access to the Data Archive server through Windows authentication (PI mappings and PI identities), then that user will be authenticated through Windows, rather than through the trust. This is because newer versions of the SDK try Windows authentication first.

This means that their access permissions will be dictated through the mappings, rather than the trust. It is best to retire SDK trusts wherever possible, and rely on the Windows authentication instead.