Windows Authentication
To use Windows Authentication, the users must be set up in the database with the user names that match the users' domain names. This format is either DOMAIN_NAME\username or username. The format depends on the system setting.
Configure REMOVE_DOMAIN_NAME in . Switch it on if it uses firstname.lastname or switch off if it uses DOMAIN\firstname.lastname.
Once at least one Windows user has access to the Administration area, disable both Anonymous Authentication and Forms Authentication in IIS. Then enable Windows Authentication. This configuration in IIS insures the web.config file is updated and Self Service address is changed accordingly.
You can only use the shipped admin user ID to access the system until Windows Authentication is configured in IIS. After that point, no manual logon is available.
Note:
If you use Active Directory import to synchronize users, ensure that at least one user is associated to the Supervisor access profile on initial import. Otherwise, access to the Admin area is compromised.
Note:
These instructions only apply to configuration on initial implementation of the system and are not appropriate for later changes to the logon protocol. This limitation is due to effect on historical data.