Skip to main content
Kofax

Changing from Windows to User Authentication

Article # 3038814 - Page views: 29

Question / Problem: 

Windows Authentication is the default authentication method when eFLOW has been installed. In some cases this authentication method can not be used. eFLOW comes with another possibility to authenticate and grant permission to eFLOW functionality the User Authentication. 

In this KB Article is described how User Authentication can be activated.

Please be aware that a mix of User and Windows Authentication is not possible.

Answer / Solution: 

The User Authentication method depends on the User information you insert into the UserIds.xml file under:

C:\ProgramData\TIS\eFlow 6\AppData\Server\System\Setup

The file is straight forward build:

<?xml version="1.0" encoding="utf-8"?>
<UserIds xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <Users>
    <UserId User="Admin" Password="password" />
  </Users>
</UserIds>

Add your users to this xml file and save the file. Then go to the DomainSecurity.xml file and add the users to your System and Application section. Make sure to not change the user for the AutoRun Station Starter Service, in this example it is the "NT Authority\System" Account.

<?xml version="1.0" encoding="utf-8"?>
<DomainSecurity xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <Applications>
    <AppAndUsers AppName="System">
      <Users>
        <UserAndRoles Name="NT AUTHORITY\SYSTEM" IsGroupName="false">
          <Roles>
            <Role Name="Administrator" />
          </Roles>
        </UserAndRoles>
        <UserAndRoles Name="Admin" IsGroupName="false">
          <Roles>
            <Role Name="Administrator" />
          </Roles>
        </UserAndRoles>
      </Users>
    </AppAndUsers>
    <AppAndUsers AppName="SimpleDemo">
      <Users>
        <UserAndRoles Name="NT AUTHORITY\SYSTEM" IsGroupName="false">
          <Roles>
            <Role Name="Administrator" />
          </Roles>
        </UserAndRoles>
        <UserAndRoles Name="Admin" IsGroupName="false">
          <Roles>
            <Role Name="Administrator" />
          </Roles>
        </UserAndRoles>
      </Users>
    </AppAndUsers>
  </Applications>
  <UserGroups />
</DomainSecurity>

Save your DomainSecurity.xml file. 

Now change your Authentication Method on the eFLOW Server from Windows to User.

Open the file TISConfiguration.config in this paths:

C:\inetpub\wwwroot\Tis Web Site\eFlow_6\Bin\ConfigSources

C:\inetpub\wwwroot\Tis Web Site\TisDefaultSTS\Bin\ConfigSources

And change the following:

<AuthenticationType>Windows</AuthenticationType>

to 

<AuthenticationType>User</AuthenticationType>

Optionally change this Tag in both files, if you like to use a sort of SingleSignOn. The Users then only need to put the password once, a token is generated and used, so the login dialog is only prompted once.

<SaveUserAuthentication>true</SaveUserAuthentication>

Save the two files and then open a Command Prompt and run IISRESET, to have immediate effect of your changes. 

For additional information please take a look in the Configuration Guide:

https://knowledge.kofax.com/Top_Imag..._Documentation

Applies to:  

Product Version
eFLOW 5.x
eFLOW 6.x

 

Article # 3038814
  • Was this article helpful?