Use Azure Active Directory credentials for secured write authentication

When security is configured with Azure AD as an authentication provider, users can use their Azure AD credentials to authenticate secured write operations. For general information about secured writes, see Working with the SignedWrite() function for secured and verified writes.

An authentication dialog opens when you attempt to write to a Secured-Write attribute, or the SignedWrite() attribute is invoked.

To use Azure Active Directory credentials for Secured Write authentication

1. Click the Authenticate button. The AVEVA Identity Manager window opens.

   

2. Select the Azure Active Directory button. This launches Azure AD log-in screen.

   Note: Windows Integrated Login is not supported in Controlled Release 2.

3. Enter your credentials and follow the on-screen instructions.

4. To complete the secured write:

   • At least one security role assigned must be assigned to you.

   • Group memberships for Azure AD must be valid.

   • You must have at least one role assigned that allows you to write to attributes.

   Authentication fails if the group was not added for your user role, and the following error is displayed:

   The login attempt failed.

   The user must have at least one role assigned to it to be able to log in.

5. In the authentication dialog, add comments and select Set to verify the attribute changes.