Configure operations control and connected experience

To operate Application Server and other System Platform products under AVEVA Operations Control, either as a product subscription only, or with connected experience, you must configure your installed and licensed products.

For more information refer to:

• Operations Control Configurator

• AVEVA Identity Manager Help

To configure Operations Control connected experience mode:

1. Open the Configurator from Start > AVEVA > Configurator.

2. Select License Mode in the left pane to configure license mode.

   1. Select the AVEVA Operations Control radio button to enable a subscription license for one of the AVEVA Operations Control packages (Edge or Supervisory); that includes unlimited use of all products in the product package for your defined set of users.

   2. Select the connected experience check box to enable a Single Sign-on (SSO) experience across all Operations Control products on this node with AVEVA Connect cloud capabilities, available in the products by default.

   

3. To configure the System Management Server, in the left pane, under Common Platform, select System Management Server.

   Note: If you are prompted for user credentials for the System Management Server, use the following format to enter the user name: DomainName\UserName. The prompt for user credentials may be displayed if you have domain admin privileges but are not an admin on the local machine. You must be a member of the Administrators or aaAdministrators OS group to configure the System Management Server.

   • Connect to a remote server or configure the local machine as the SMS.

   • No System Management Server option is not recommended. You must configure a System Management Server to use Operations Control and connected experience.

   • Only one of the machines in the network is identified and configured as a System Management Server. Machines running AVEVA products can then connect to that single System Management Server to establish trust and configure encrypted communications.

   • Configuring a Redundant SSO server does not configure a separate System Management Server. A Redundant SSO server is not required, but provides a backup in case the System Management Server loses access to the external authentication provider.

     

4. Select Federated Identity Provider under Common Platform in the left pane to configure a Federated Identity Provider.

   The Identity Manager component in the PCS Framework, available on the System Management Server (SMS) and Redundant SSO (RSSO) nodes, can be configured to enable "federated" login with AVEVA Connect. This allows a user to enter the email address associated with their AVEVA Connect account into the Identity Manager login form. Then, they are redirected to AVEVA Connect to complete the log in process.

   Note: You must have a valid AVEVA Connect account and be an administrator on that account to configure the Federated Identity Provider.

   

5. Under AVEVA System Platform, select Identity Manager Registration. Check that the required configuration requirements are complete. Then, Enable "Register AVEVA System Platform with Identity Manager" and click the Configure button. The configuration requirements that must be met before you can register with Identity Manager are:

   • The System Management Server (SMS) is configured.

   • The Federated Identity Provider is configured.

   • If you are connecting to a remote SMS, make sure that the Federated Identity Provider on the remote SMS is configured correctly.

     

Other Components

6. To register InTouch with AVEVA Identity Manager, in the left pane, under AVEVA InTouch HMI, select Identity Manager Registration.

   Register InTouch HMI with Identity Manager only when you have completed the preceding steps:

   • You have enabled AVEVA Operations Control connected experience as your license mode.

   • You have configured the System Management Server.

   • You have selected AVEVA Connect in the Federated Identity Provider.

7. Click the Configure to register with Identity Manager.

   

8. To Configure the InTouch Web Client to use User Authentication, in the left pane, under Industrial Graphics Server, select Authentication Settings.