Skip to Content

Configuring integrated Windows authentication

App Builder can integrate with Active Directory using Integrated Windows Authentication (IWA).

Configuration involves the following procedures:

  1. Installing the Windows Authentication service on Windows.
  2. Enabling Windows Authentication on the App Builder web application.
  3. Creating an App Builder security provider.

Requirements

To proceed, you will need:

  • Administrator access to the web server hosting App Builder.
  • Administrator access to App Builder.

Installing the Windows authentication service on Windows

Windows Authentication is service of the Web Server (IIS) role. The Windows Authentication service is not installed by default. The following document describes how to install the Windows Authentication service:

https://www.iis.net/configreference/system.webserver/security/authentication/windowsauthentication

Enabling Windows authentication on the App Builder web application

Once the Windows Authentication service has been installed, you will need to enable Windows Authentication on the App Builder web application within IIS.

  1. Launch the* Internet Information Services (IIS) Manager. In the *Connections** pane, locate and select the App Builder application.

    Sites default web site App Builder application

  2. Typically, the App Builder application is located beneath Sites → Default Web Site. However, it may have been installed under a different web site or directory.

  3. Double-click the Authentication icon.

    Authentication

  4. Select the Anonymous Authentication item.

  5. Click the Disable link the Actions pane.

    Actions disable

  6. Select the Windows Authentication item.

  7. Click the Enable link in the Actions pane.

    Enable

Creating an App Builder security provider

Integrated Windows Authentication (IWA) is enabled within App Builder via a security provider. Start by signing into App Builder as an administrator.

  1. Navigate to the IDE
  2. Click the Security Providers button
  3. In the User Authentication panel, click the + User Authentication button

  4. Provide the following:

    • Name: Integrated Windows Authentication
    • Type: Integrated Windows Authentication
    • Enabled: Checked
    • User Provisioning: Check to enable just-in-time user provisioning

  5. Click the Save button

Note

See User and group provisioning for additional information on user provisioning.