Windows Authentication in the JAMS Web Client

Follow

JAMS users commonly log in and browse the JAMS Web Client through JSON Web Token (JWT) Authentication.

Beginning with V7, the JAMS Web Client also supports Windows Integrated Authentication as an alternative to JWT Authentication. 


NOTE: After upgrading JAMS, the steps in this procedure will need to be completed again.



NOTE: After upgrading JAMS, the identity of the JAMSSite App pool is reset to localsystem in IIS if a domain account has been set on the existing configuration. 


 

How to Enable Windows Authentication in the JAMS Web Client 

  1. Follow the instructions in the links below to add/install Windows Integrated Authentication on the IIS Server, enable it on IIS, and then disable Anonymous Authentication.
  2. Go to <JAMS install directory>\Program Files\MVPSI\JAMS\WebClient. 
  3. Open the Common.config file.
  4. For the ContextType key, change to the value to Domain.
  5. For the ContextName key, change the value to your domain name.
  6. Add the AuthClassName key and its value as shown below.
    <?xml version="1.0" encoding="utf-8"?>
    <appSettings>
    <add key="ConnectionString" value="Server=(local); Connect Timeout=60; Integrated Security=SSPI; Database=JAMS;" />
    <add key="JAMSServer" value="localhost" />
    <add key="SchedulerName" value="" />
    <add key="SchedulerPort" value="" />
    <add key="DefaultTenantName" value="Default" />
    <add key="Auth:ClientId" value="JAMSADClientId" />
    <add key="Auth:ClientSecret" value="" />
    <add key="Auth:ContextType" value="Domain" />
    <add key="Auth:ContextName" value="your.domain.name" />
    <add key="Auth:ContextContainer" value="" />
    <add key="Auth:TokenLifetime" value="0.12:00" />
    <add key="Auth:AllowInsecureHttp" value="true" />
    <add key="AuthClassName" value="MVPSI.JAMS.Auth.AuthProviderWindowsIntegrated" />
    </appSettings>
  7. Save and close the Common.config file.
  8. Open the Web.config file from the same directory.
  9. Under <system.web>, find <authentication mode="None" /> and change it to <authentication mode="Windows" />
    <system.web>
     <compilation targetFramework="4.6" />
    <httpRuntime targetFramework="4.5" /> <authentication mode="Windows" />

    NOTE: If any references to AuthClassName have been added to the Web.config file, update the value to "MVPSI.JAMS.Auth.AuthProviderWindowsIntegrated".
  10. Save and close the Web.config file.
  11. In the IIS Authentication Module, disable Anonymous Authentication.
  12. In the IIS Authentication Module, enable Windows Authentication.mceclip1.png
  13. Restart your IIS server.
  14. When you are back online, log in to Windows.

After the completing the above steps, the JAMS Web Client will load and bypass the Login Page. If you are logged in to Windows when the Web Client is launched, JAMS will authenticate your Windows credentials.

Related Information 

Have more questions? Submit a request

Comments

  • Avatar
    Brian Pinkston

    Great instructions!