AIM Authentication for Controls in InTouch OMI

You can use AVEVA Identity Manager (AIM) authentication for AVEVA Work Tasks Controls in InTouch OMI. To enable AIM authentication, ensure that in Central Configuration when the Resource Provider is set to Active Directory, the Use Token Service is set to the appropriate server. Otherwise, the control will be loaded within the context of the default user, if specified. If the default user is not specified, then the control will be loaded within the context of the user who configured the workflow gateway.

Note:
- Ensure to import the ArchestrA app before configuring AIM for InTouch OMI.
- When using AIM authentication for controls in InTouch OMI, ensure all controls are configured for AIM authentication.

Configuring application to point to AIM

Preview View App

1. Go to <ArchestrA Installed Path>\Framework\Bin\ModernEditors\Preview\ViewAppFramework.

2. Edit View.exe.config file to include the following key value pairs:

   <!-- Configure the AIM by adding the following key value pairs.

   Replace "your_token_server" and "your_client_id" with proper values. -->

   <add key="TokenServiceBase" value="https://<AIM Server Name>/identitymanager" />

   <add key="ClientId" value="SE_WSP_NG" />

   <add key="Scope" value="openid profile system offline_access" />

Deployed View App

3. Go to <ArchestrA Installed Path>\Framework\Bin\ViewAppFramework.

4. Edit View.exe.config file to include the following key value pairs:

   <!-- Configure the AIM by adding the following key value pairs.

   Replace "your_token_server" and "your_client_id" with proper values. -->

   <add key="TokenServiceBase" value="https://<AIM Server Name>/identitymanager" />

   <add key="ClientId" value="SE_WSP_NG" />

   <add key="Scope" value="openid profile system offline_access" />

Configuring System Platform IDE Security

5. In the System Platform IDE, on the Galaxy menu, click Configure, and then click Security.

   The Security dialog box appears,

6. On the Authentication Mode tab, select OS User based or OS Role based.

7. On the Users tab, under Authorized Users Available, add users, and then under Associated Roles for Administrator, map Administrator role.

8. Click OK.

   The System Platform IDE will close and reopen.

Using AIM authentication for controls

9. Complete the Initial Steps.

10. In the System Platform IDE, double-click on the instance of the view app.

    The instance of the view app is opened.

11. Open the layout and add a panel on the top.

12. On the Toolbox tab, click TitleBarApp, and then drag and drop TitleBarControl in the Layout.

13. On the Toolbox tab, click WorkTaskApp, and then drag and drop a control to the default panel in the Layout.

14. On the Properties tab, configure other settings for the control as required.

15. Click Save.

    The control, along with the set properties, is saved.

16. Click Preview to preview the control in InTouch OMI, if required.

17. In the System Platform IDE, right-click on the instance of the view app, and then click Deploy.

    The Deploy dialog box appears, and shows the progress of the deployment.

18. Click Close.

    The control can now be used inside InTouch OMI.

19. Run AVEVA OMI Application Manager, and then click Launch for the configured instance of the view app to use the control.

Note:
- When running AVEVA OMI Application Manager, if you get an error that “You should be part of either the Administrators, WorkTasksAdmins, or WorkTasksRemoteUsers role.”, then run AVEVA OMI Application Manager as an Administrator.
- For customization purposes, you can manually create a symbol to log on instead of using the TitleBarApp as follows:
1. In the System Platform IDE, on the Galaxy menu, click New, and then click Symbol.
A new symbol is created, and appears in the Graphic Toolbox.
2. Double-click on the symbol, add two buttons, and then label them as Login and Logout.
3. Right-click Login button, click Edit Animations, and then add Action Scripts as follows:
ShowLoginDialog();
4. Right-click Logout button, click Edit Animations, and then add Action Scripts as follows:
Logout();
5. Open the layout and add a panel on the top.
6. On the Toolbox tab, click the symbol, and then drag it to the top panel in the Layout.
7. On the Toolbox tab, click the symbol, and then drag it to the top panel in the Layout.