Configure and Register Token Service

You can manage AIM token configuration using:

• Configurator tool

• AVEVA Work Tasks Central Configuration

  Note: In the Configurator tool, you can also configure the Redundant Single Sign-On (RSSO) server for seamless authentication. You can configure a machine that connects to an existing System Management Server as a Redundant Single Sign-On (RSSO) server. When you select the System Management Server and configure the current machine, the SSO capability from the System Management Server is shared with the RSSO server.

Token Service Configuration using Configurator Tool

The Configurator window lists the System Management Servers (SMS) as illustrated below:

• Click the Configure button to configure certificate manager.

Token Service Configuration and Registration using Central Configuration

1. On the Windows Start menu, point to Programs, point to AVEVA, and then right-click Central Configuration, and select Run as Administrator.

   The Central Configuration web page appears.

2. Click Token Service.

   The Token Service page appears.

3. Select the Configure check box to specify the server name and attach the certificate.

   The confirmation message appears whether you want to configure the token service.

   Note:
   - You need to select Configure check box to configure the token service. If not selected, the token service will only get registered.
   - If you reconfigure the token service, the existing configuration and the certificate will be deleted. Also, the applications which use the same token service will stop working.
   - If the token service is reconfigured, the token service registered from Central Configuration should be re-registered.
   - Ensure the primary System Management Server is online during token service configuration.
   - System Management Server should have PCS framework 8.1.2 installed.

4. Click OK to configure the token service.

5. In the Server Name box, select the server name where AIM is installed.

6. Click the attachment icon against the Certificate box to select the certificate. The selected certificate should be in pfx format.

7. In the Password box, enter the password for the selected certificate.

8. In the Token Service URL box, enter the URL of the server where AIM is installed and configured. The URL format should be https://servername/identitymanager. The servername should be fully qualified host name.

9. In the Alias Name box, enter the alias name for the token service.

10. In the Registrar User box, enter the user name used for registering to AIM.

11. In the Password box, enter the password for the Registrar user.

12. Click Register.

    The token service is registered successfully.

13. Click Reset and then repeat steps 3 - 11 to configure and register additional token services for authentication.

Note: While registering Token Service, all existing Enterprise Console URIs will be added to redirect URI. If you are creating a new Enterprise Console, you must re-register the Token Service.