Configure the AVEVA Identity Manager

The AVEVA Identity Manager (AIM) is a standalone authentication server that exposes an OpenID Connect endpoint. The System Management Server must be configured before using AIM; this is typically done during System Platform installation via the Configurator. After setting the Galaxy security mode to allow external authentication providers, the Azure Active Directory (AD) can be used as the identity authenticator for single sign-on, without relying on Windows-based authentication. You must have an Azure account and have access to the Microsoft Azure Portal to configure and use Azure AD as an authenticator.