Setting Up Windows Authentication (Active Directory)

Introduction 

Windows Authentication, also known as Integrated Authentication, or Windows AD Authentication requires that the MediaPulse AppServer and clients are on the same domain or have a trust relationship between two domains within the same forest.

This authentication will not prompt the users for credentials and will rely on the underlying Windows authentication.

This authentication requires connecting to the AppServer via a TCP port, which needs to open if there are any firewalls between the server and clients.

The port number can be determined by looking at the CLIENT_DEMONS setting in mediapulseappserver.config.txt. This value (e.g. 8472) is used for SQL logins, the value for Windows login is 100+ the configured value (e.g. 8572)

Setting up Windows Authentication for the Smart Client

1. Launch the MediaPulse Admin Tool as administrator. This is the MediapulseAdmin.exe location on the application server in the root folder of the instance. 
2. Click on Installation > Xytech ClickOnce
3. Click on the Windows radio-button, this will mark it as the default authentication method.
4. Click on the Allow User Control checkbox, this will allow you to switch between Windows and database logins.
5. Click on the Deploy button to deploy the changes.
6. Once a user downloads the updated Smart Client, they will see Windows as the default authentication method, and the credential fields will be disabled.

Setting up Windows Authentication in Web / IIS

Windows Authentication has to be configured in IIS

1. In IIS Manager, expand the MediaPulse application and click on the WinLogin folder,
2. double-click on Authentication.
   
3. Disable Anonymous Authentication, enable Windows Authentication.
4. Right-click on Windows authentication and select providers, then move NTLM up to the top.
   
5. Edit your mediapulseappserver.config.txt and add a new setting called WINAUTHKEY and set the value to any random string.
6. Locate the following two lines in the configuration, set PRE as the default (first) option, and set the user control to Y. If either line is missing, add it, and modify the SERVER_NAME as appropriate.
   • SKYWEB_ SERVER_NAME _AUTHMETHODS=PRE,DB
   • SKYWEB_ SERVER_NAME _AUTHUSERCONTROL=Y
7. Copy the mediapulseappserver.config.txt file to the Sky\App_Data folder, overwriting the existing copy.
8. Edit the Sky\web.config, and save it without making any changes.
9. It is recommended that you restart the AppServer after making all the changes.