Enable Basic authentication

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication.

We recommend that you enable Kerberos delegation. However, if your domain does not support Kerberos delegation (for example, multiple domains in different forests), you should enable Basic authentication instead.

With Basic authentication, AVEVA PI Vision can honor user specific security. However, Basic authentication sends user credentials to the web server in plain text, so you must configure the AVEVA PI Vision website to use Secure your PI Vision site with HTTPS.

1. In Internet Information Services (IIS) Manager, select the PIVision site and double-click the Authentication icon under the features view.

   

2. Select Basic Authentication and select the Enable link in the right pane.

3. To configure mobile devices to use Basic authentication:

   1. Select Windows Authentication.

   2. Select the Providers link from the right pane.

   3. Delete NTLM from the window that opens.

4. To configure desktop browsers to use Basic authentication:

   1. Select Windows Authentication and select the Disable link in the right pane.

      Note: This will prevent desktop browsers from using Windows authentication.