Configure PI Vision Process Identity for OpenID Connect

If you selected the OpenID connect only authentication mode with the Use OpenID Connect with Process Identity Client ID option, you must configure mappings for the PI Vision Process Identity Client ID on all AF and PI Data Archive servers from which PI Vision accesses data.

Create an AF Identity mapping in PI System Explorer for the PI Vision Process Identity AVEVA Identity Manager Client:

1. In PI System Explorer, sign in to an OpenID Connect-enabled AF server using the OpenID Connect Authentication authentication mode.

2. Open the AF Server properties and select the Mappings tab.

3. Select New Mapping.

4. Select OpenID Connect underneath Identity.

5. Select the magnifying glass next to Role (A). The Select an OIDC Mapping dialog opens.

6. Select the Client ID option.

7. Search for PIVision_ProcessIdentity_<Hostname>, where <Hostname> is the host name of the machine on which PI Vision is installed. (The PI Vision Process Identity AVEVA Identity Manager Client registration was created when PI Vision was configured in the previous section, Select an authentication mode and identity AF server.)

8. Select the desired PI Vision Process Identity and select OK.

9. Select the desired PI Identity mapping and select OK to create the mapping.

Add a mapping in PI System Management Tools for PI Vision Process Identity AIM Client Registration

10. In PI System Management Tools 2023 or later, select the OpenID Connect-enabled Data Archive server under the Servers list.

11. Select Mappings & Trusts under Security.

12. In the Mappings tab, right-click and select Add New Mapping.

13. Choose the OpenID Connect authentication mode.

14. For Role, select the ... option.

15. Authenticate with the AIM server. The Select an OIDC Mapping dialog appears.

16. Select the Client ID option.

17. Search for PIVision_ProcessIdentity_<Hostname>, where <Hostname> is the host name of the machine on which PI Vision is installed.

18. Select the desired PI Vision Process Identity client and select OK.

19. Select the desired PI Identity mapping and select Create to create the mapping.