How to configure Aurora for Windows and Forms Login

Aurora Admin

Please contact Blue Pillar Customer Support for assitance in setting up Aurora Login with Active Directory.

How to configure Aurora for Windows Active Directory Login:

Pre-requisite:  the server must be on the orgnaization's domain.

The Login format is determined in the respective web configs for Classic and Aurora Apps.  In order for AD credentials to be valid for a User, the User must have their LOGIN field match their AD login.  And the DOMAIN\ADlogin must be listed in the ACTIVE DIRECTORY LOGIN field in their User configuration:

Note: the USER'S NAME field is only used on Aurora Apps reports and screens.  The LOGIN field is the name the User will also use for Forms login.

 

Configuring for Windows (AD) Login:

C:\Program Files\Blue Pillar, Inc\Avise\UI

web.config (Windows install)

<authentication mode="Windows" /><authorization><deny users="?" /></authorization>

 

C:\Program Files\Blue Pillar, Inc\Avise\WebUI.Mvc

Web.config (Windows install)

<authentication mode="Windows" /><authorization><deny users="?" /></authorization>

 

Configuring for Forms Login:

C:\Program Files\Blue Pillar, Inc\Avise\UI

web.config (Forms install)

<authentication mode="Forms"><forms loginUrl="~/login.aspx" timeout="2880" /></authentication>

 

C:\Program Files\Blue Pillar, Inc\Avise\WebUI.Mvc

Web.config (Forms install)

<authentication mode="Forms"><forms loginUrl="~/Auth/Login" timeout="2880" /></authentication>

For Server 2016, you need to add Windows Authentication and enable it:

  1. Open Server Manager
  2. Add Roles and Features
  3. Role-based Feature <next>
  4. Server name selected <next>
  5. Expand 'Web Server' (two times)
  6. Expand 'Security'
  7. Check the boxes for 'Basic Authentication' and 'Windows Authentication' <next>
  8. Click INSTALL (make sure IIS screen is closed)

 After installation is complete:

  1. Open IIS Manager
  2. Drill down to the Avise 4.0 and Avise 5.0 websites
  3. Select a website and double-click AUTHENTICATION in the IIS section
  4. Right click 'Windows Authentication' and select ENABLE
  5. Right click 'Forms Authentication' and select ENABLE
  6. Repeat for the second website
  7. Restart Server

If Windows login is not working with IE (but is working with Chrome) on a local computer:

  1. Open IIS Manager
  2. Drill down to the Avise 4.0 and 5.0 websites
  3. Select a website and double-click AUTHENTICATION in the IIS section
  4. Double-Click WINDOWS AUTHENTICATION
  5. Click on 'Providers' in the ACTIONS (right side) pane
  6. Select 'NTLM' and click MOVE UP so that it goes above 'Negotiate' in the list
  7. Click OK
  8. Repeat for the second website
  9. Restart IIS services

If Windows login is STILL not working with IE (but is working with Chrome) on a local computer:

  1. Reverse the steps in the section above, and move 'Negotiate' back to the top of Enabled Providers
  2. Open Internet Explorer, Internet Options, Advanced
  3. In the SECURITY section, uncheck 'Enable Integrated Windows Authentication'
  4. Click OK
  5. Restart PC
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk