IMOS On-Prem - Enabling Windows Authentication

It is not necessary for users to remember separate login names and passwords for IMOS. IMOS supports Windows Authentication; after a user logs into Windows, no additional authentication is required to log into IMOS.

Windows Authentication is enabled by default for new installations of IMOS7.  To use this feature, see Adding User Accounts.

To enable Windows Authentication when upgrading from IMOS6:

1. Edit imosauth.exe.config (imos\services).

   1. Change the tcp channel to use a secure connection: 

      <channels>
      <channel ref="tcp" port="922" secure="true" />  
      </channels>

   2. Restart the IMOS Authentication Service so that the change takes effect.
2. Edit imosshell.exe.config (imos\exe).
   1. Set the imosshell to use “mixed” authorization mode (in other words, use either IMOS or Windows Authentication), by changing the authMode value. (You may need to add the entire line, if it does not exist.)
      <appSettings>
         <add key="authServiceUri" value="tcp://hst:922/authServiceUri"/>
         <add key="authMode" value="mixed" />
      </appSettings>
3. Edit imosmsg.exe.config (imos\services).
1. Set the Messaging Service to use mixed authorization mode, by changing the authMode value. (You might need to add the entire line.)
   Note that if this is not done, the service will not be able to authorize itself with IMOS and will not process messages properly.
   <appSettings>
      <add key="authServiceUri" value="tcp://hst:922/authServiceUri"/>
      <add key="logFilename" value="logs\imosmsg.log" />
      <add key="logLevel" value="debug" />
      <add key="debugBreakOnInit" value="false" />
      <add key="runAsExe" value="false" />
      <add key="authMode" value="mixed" />
   </appSettings>
2. Restart the IMOS Messaging Service so that the change takes effect.

Adding User Accounts with Windows Authentication

1. In the Data Center , click Security.

2. For each account that should use Windows Authentication, follow these steps in the Security List:
   1. Click the Name to edit the user properties.
      
   2. Make sure that the IMOS user name used with Windows Authentication is the same as the Windows user name. (Note that no domain or workgroup names should be prefixed.) This is how IMOS determines which Windows user and IMOS user are linked.
   3. Click the Windows Authentication radio button.
   4. Click OK to save the changes. The next time IMOS is started:
      • The login window will have a check box in the lower left corner that controls whether to automatically log in using Windows Authentication.
      • The User Name field will include the Windows user name.
      • Neither the User Name field nor the Password field will be editable.
      • Clicking Log In will automatically log into IMOS, with the privileges associated with the IMOS user.