Security Server

Total: ~21 min

The Security Server is a key component of Platform Services as it maintains the registry of all users and groups, as well as the security permissions assigned to them.

Initial Setup of Your Security Server

The security system provides restricted access to functions based on the concept of a logged-in user, which can be used as a powerful tool to configure access. You can launch and configure the Security Server from Workbench. This video introduces the initial setup of the Security Server.

Creating Users and Groups

The ICONICS Security Server includes the ability to control user access and privileges for individual users or entire groups within the system. You can apply security restrictions at the group level, the user level, or both.

User Permissions to Control Applications

This video introduces how to toggle the user's permissions for entire applications or sepefic actions within an individual application, such as disabling user's ability to edit Security provider in Workbench.

User Permissions to Control Datasources, Assets, and Alarms

This video introduces how to control the security permissions to an individual point, alarm, or asset for users or groups with different security levels.

Linking to Active Directory for User Accounts

Active Directory feature in Workbench security allows for automatic synchronization of users and groups with the Active Directory domain. In 10.96, users can use Azure Active Directory mode to synchronize with an Azure Active Directory.

Connecting to OAuth 2.0 Providers

This video talks about the configuration of an OpenID Connect identity provider, as known as OIDC provider OIDC connector, for using single-sign-on with 3rd party applications.

Defining and Using Critical Points

This video talks about Critical Points. Security server allows users to design a subset of write-able points known as Critical Points, so that when other users attempt to write to the critical point, they will be prompted to login again - this ensures that the person writing the value is an authenticated user.