Create a PI AF identity and mapping for Process Identity Client

Note: This section only applies if installing in an environment whose end users only use OpenID Connect authentication and you selected the authentication option Use OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers. (This is the only valid selection if your PI Vision server is not installed on a domain.) Otherwise, proceed to Configure security.

For each PI AF server that you want AVEVA PI Vision to access, you need to create a PI AF identity.

1. Open PI System Explorer.

2. Select File > Connections.

   The Servers window opens and lists all PI AF servers.

3. Right-click the connected PI AF server and then select Properties.

4. In the PI AF Server Properties window, select the Identities tab.

5. Right-click the list of identities, and then select New Identity to open the Security Identity Properties window.

6. In the Name field, enter the name of the new identity.

7. Select the Mappings tab, and then select Add to open the Security Mapping Properties window.

8. In the Account field, enter the AVEVA PI Vision service account that you have created.

   1. Select the OpenID Connect authentication mode.

   2. In the Role field, select the Search button to browse the available Roles and Clients on the Identity Server.

   3. Choose the Client ID option and browse to the Process Identity Client. Select it and select OK.

9. In the Security Identity Properties window, select OK.