PI Data Archive server authentication on mobile devices

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication.

We recommend that you use Basic authentication with SSL encryption for mobile device users. This enables all supported mobile apps and browsers to authenticate to the AVEVA PI Vision server successfully. Some devices can also support Kerberos authentication.

Kerberos authentication in mobile Safari for iPhones and iPads

Use a configuration profile to send configuration information to iOS devices. Include a Single Sign-On Account payload to send Kerberos information. For more information, consult the Apple Developer documentation:

• Configuration Profile Reference

• Single Sign-On Account Payload

Basic authentication

With Basic authentication, user credentials are passed to the PI System. You should use the Basic authentication method if you use mappings on the Data Archive server to provide user specific security. However, Basic authentication sends the user credentials to the web server in plain text, so you must also configure the AVEVA PI Vision website to use SSL. See Secure your PI Vision site with HTTPS.

To configure Basic authentication, see Enable Basic authentication.