Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

In order to be able to use the mail function of the tia® H5 Viewer, the company must have implemented user administration via Office 365/Azure.

...

Some settings must be made to the application.

Authentication:

...

image-20240628-112946.pngImage Added

Info

The path to the Keycloak realm is not required for OpenID Connect Only

There are two URIs, as the authentication is triggered by two places.

These are redirect URIs. The client must have access to the stored address in the network from its computer. HTTPS must also be used.

This is therefore The following URIs must be maintained in the section “Redirect URIs” (this is the address to which you want to be sent back after a successful login.For instance: ):

  1. When using V - “Viewer standalone” and for using the tia® H5 Viewer from within SAP:

    • https://[IP-Address]:[HTTPS-Port]/[Applikation]/viewer

    • https://[IP-Address]:[HTTPS-Port]/[Applikation]/

...

    • viewer/content

  1. When using CSV - “ContentServer incl. tia® H5 Viewer”

...

  1. , the following URI has to be added in addition as the authentication is triggered by two places:

    • https://[IP-Address]:[HTTPS-Port]/[Applikation]/

...

    • contentserver

Info

The client must have access to the specified addresses in the network from its computer. HTTPS must also be used.

Certificates & secrets

We need a client secret for our application. This can also be seen as the application password. This always has an expiration date.

...

For instance: https://login.microsoftonline.com/tenantID

ClientId: This is the application identity. Can be viewed under "Overview"

...