Configuring Integrated Windows Authentication

Setup the Active Directory Domain Controller server, AX Server, and the desktop environment for each client application end user to configure Integrated Windows Authentication. Integrated Windows Authentication enables single sign-on access control for AX Client users.

Note

Integrated Windows Authentication is not supported for instances of AX Client running on the server's operating system. You must be connecting from a client operating system otherwise the application defaults to form-based authentication.

How it works

Integrated Windows Authentication uses the security features of Windows clients and servers. It does not prompt users for a user name and password, and the current Windows user information on the client computer is supplied by the web browser through a cryptographic exchange. The following protocols are used to manage authentication:

  • SPNEGO AX Client connections
  • Kerberos server profile connections to Analytics

If the authentication exchange initially fails to identify the user, the web browser will prompt the user for a Windows user account user name and password.

Create an SPN account

Create a new Windows Service Principal Name (SPN) account in Active Directory to map the AX Server authentication service to an Active Directory account.

Map the authentication service to the SPN account

Map the AX Server authentication service to the Active Directory SPN account using the ktpass command.

Register an SPN for the AX Connector service

Register an SPN for the AX Connector service using the setspn command.

Test the SPN account mapping

Optionally, copy the keytab file to the AX Server instance and use the kinit command to test your SPN account mapping.

Enable Integrated Windows Authentication from Internet Explorer

Enable Integrated Windows Authentication from Internet Explorer in each end user's desktop environment. Users must be connecting from a client operating system, Integrated Windows Authentication is not supported for instances of AX Client running on the server's operating system.

Analytics Exchange 14.1 Client Help