Authentication management with Windows security

To configure Data Archive for Windows authentication, use PI identities and PI mappings. Create a PI mapping between the PI identity and a Windows group (this might be an Active Directory or local Windows security group). Authenticated Windows users are automatically authenticated on Data Archive through the mapping.

Note: PI identities are ideal for mappings because they do not imply management of users directly on Data Archive. However, you can also use PI groups and users to create mappings.

Basic management tasks for Windows authentication are:

• Mapping management

• Manage PI identities in SMT

• Manage service principle names

• On upgraded systems, you might have legacy users and groups that you need to use in mappings (Manage Data Archive user accounts and groups)

For fundamental instructions on planning and implementing this type of configuration, see the Security Configuration Guide.