Configure PI Notifications screenshots for OpenID Connect

To take a screenshot of a display when PI Vision is in OpenID Connect authentication mode, the display needs to be accessible to PI Notifications. To do this, you can create an AF Identity for PI Notifications and share the display with this identity in PI Vision.

Note: The PI Notifications AVEVA Identity Manager Client registration is created automatically when the 2023 version of PI Notifications is installed. The PI Notifications AVEVA Identity Manager Client ID starts with PINotifications.

Note: When PI Vision is in OpenID Connect authentication mode, PI Notifications cannot correctly capture screenshots that include data from PI Servers that require Windows authentication. Symbols that use these servers will show “No Data,” and a prompt for Windows credentials will be included in the screenshot.

1. Create an AF Identity mapping in PI System Explorer for the PI Notifications AVEVA Identity Manager Client:

   1. In PI System Explorer, sign in to an OpenID Connect-enabled AF server using the OpenID Connect Authentication authentication mode.

   2. Open the AF Server properties and select the Mappings tab.

   3. Select New Mapping.

   4. Select OpenID Connect underneath Identity.

   5. Select the magnifying glass next to Role (A). The Select an OIDC Mapping dialog opens.

   6. Select the Client ID option.

   7. Search for PINotifications.

   8. Select the desired PI Notifications client and select OK.

   9. Select the desired Identity mapping and select OK to create the mapping.

2. On the PI Vision Administration website, grant access to the AF Identity that the PI Notifications client is mapped to:

   1. Select the Security page on the PI Vision Admin website .

   2. Ensure that the PI Notifications client that was created in step 1 is on the Identity AF Server.

   3. Select the User Access Levels tab.

   4. Grant access to the AF Identity that the PI Notifications client is mapped to by adding it to the Administrator, Publisher, or Explorer group. The Explorer group is recommended because that gives it the minimum required permissions.

3. On the PI Vision website, share the PI Vision display with the AF Identity that the PI Notifications client is mapped to.

   1. On the home page of PI Vision, select the gear icon on the display where a PI Notifications screenshot will be taken.

   2. Under Unassigned AF Identities, select the AF Identity that the PI Notifications client is mapped to.

   3. Select the > button to share the display with the AF Identity.

If the display accesses data on an OpenID Connect-enabled Data Archive server, a mapping needs to be created on the Data Archive server for the AF Identity that the PI Notifications AIM Client is mapped to.

Add a mapping in PI System Management Tools for PI Notifications AIM Client Registration

4. In PI System Management Tools 2023 or later, select the OpenID Connect-enabled Data Archive server under the Servers list.

5. Select Mappings & Trusts under Security.

6. In the Mappings tab, right-click and select Add New Mapping.

7. Choose the OpenID Connect authentication mode.

8. For Role, select the ... option.

9. Authenticate with the AIM server. The Select an OIDC Mapping dialog appears.

10. Select the Client ID option.

11. Search for PINotifications.

12. Select the desired PI Notifications client and select OK.

13. Select the desired PI Identity mapping and select Create to create the mapping.