×

Have You Seen Workflow Lately? Click here to check out all the new features in the latest version.

Supercharge your GE solution! Download a free trial of Proficy Operations Hub, CSense analytics, and more. Learn more about the Proficy 2024 releases, by signing up for one of our upcoming events.

Home
Security
Domain-Based Security
Windows Domain-Based Security
You can use Windows domain user accounts to manage access to and within Workflow. You can also configure domain user accounts for automatic login on either a global basis or for individual computers.
Login and Logout Capabilities
Workflow access can be configured in multiple ways. You can configure automatic login and logout on individual computers, on all computers in your system, or on a subset of computers in your system. You can also retain manual login and logout on a global basis or on specific computers.
Automatic Login and Logout
Automatic login and logout can be configured for individual workstations or for all workstations that are included in a global default configuration. You can configure automatic login for Windows users on individual computers or on a global basis. You can configure automatic login for Workflow users only on individual computers.
Automatic Login/Logout Configuration
The Login/Logout Configuration tab allows you to enable and configure automatic login and logout.

Workflow Products Documentation

Security
- Security Overview
- Users and Groups
- Domain-Based Security
  - Windows Domain-Based Security
    You can use Windows domain user accounts to manage access to and within Workflow. You can also configure domain user accounts for automatic login on either a global basis or for individual computers.
    - Windows Domain Users Logging into Workflow
      If you are using Windows user names and passwords within Workflow security, be aware that Windows user accounts must have the policy Access this computer from the network applied under the local security policy. By default, this policy is assigned to the groups Users and Everyone on the local machine.
    - Authenticate Windows Domain Users for Vision Calls
      Vision uses a token to make a secure call. For Windows authentication, the Proficy STS service needs to query the domain controller to retrieve groups that the user belongs to. This group information is used to validate the Windows user.
    - Password Expiration Considerations
      When Workflow security is synchronized with Windows security, passwords can expire.
    - Configuring Domain-Based Access Control to Workflow Functionality
      You can use active directory universal or global groups to control access to Workflow functionality.
    - Key Sets
      Key sets are groups of permissions, based on areas of operation within your facility, that define the operations a group of users can perform.
    - Login and Logout Capabilities
      Workflow access can be configured in multiple ways. You can configure automatic login and logout on individual computers, on all computers in your system, or on a subset of computers in your system. You can also retain manual login and logout on a global basis or on specific computers.
      - Automatic Login and Logout
        Automatic login and logout can be configured for individual workstations or for all workstations that are included in a global default configuration. You can configure automatic login for Windows users on individual computers or on a global basis. You can configure automatic login for Workflow users only on individual computers.
        Automatic Login and Logout Behavior Examples
        These examples describe how Workflow behaves during specific autologin and autologout situations.
        Automatic Login Authentication
        When a user logs in to Workflow, his login credentials are authenticated. Workflow user credentials are authenticated by Workflow; Windows user credentials are authenticated by the domain controller.
        Configure automatic login
        Configure automatic login if you want Workflow to automatically log in using the defined Workflow user or the currently logged in Windows user credentials.
        Automatic login after configuration changes
        If changes are made to the automatic login configuration, they do not take effect immediately. You must log out and then log back in for the changes to take effect.
        Configure automatic logout
        Configure automatic logout if you want Workflow to automatically log out the user after a specified period of inactivity. When you configure automatic logout on a global basis, the specified timeout applies to all computers that are configured to use the global settings.
        Automatic Login/Logout Configuration
        The Login/Logout Configuration tab allows you to enable and configure automatic login and logout.
      - Manual Login and Logout
        Operators can log into Workflow manually using the Login dialog box. When the login dialog box appears, it allows operators to enter their login name and password.
      - Security Log File
        Workflow security generates a log of security-related actions taken by Workflow users. The security log file resides in the default log path and is called ProficySTS.LOG.
    - Workflow User Password Security
      Administrator users have the ability to make changes to the security settings in Workflow, including configuring lockout thresholds, re-enabling locked out user accounts, configuring password complexity, and determining whether or not users can change their passwords.

Automatic Login/Logout Configuration

The Login/Logout Configuration tab allows you to enable and configure automatic login and logout.

Note: This tab is available in the Computer Editor only if the selected computer is configured to override the global configuration settings.

The following table describes the available options on both the Computer Editor and the Default Computer Editor. The differences are noted.

Attribute	Value	Description
Enable Auto Login	User-defined	Select this check box to enable automatic login. Clear this check box to disable automatic login.
Proficy User	User-defined	Select this option to indicate that automatic login is based on the defined Workflow user login credentials. Note: This option is available only if you are configuring Workflow user accounts on the Computer Editor.
Proficy User: User Name	User-defined	Specifies the name of the user who will be automatically logged in when Workflow is started on this workstation.
Proficy User: Password	User-defined	Specifies the password for this user.
Windows User	User-defined	Select this option to indicate that automatic login is based on the currently logged in Windows user. Note: This option applies if you are configuring autologin for Windows user accounts on either the Computer Editor or the Default Computer Editor.
Enable Auto Logout	User-defined	Select this check box to automatically log a user out after a specified time if Workflow is inactive on this workstation. You must restart the Workflow client for this setting to take effect.
Timeout in	User-defined	Specifies the number of minutes and/or seconds of inactivity allowed before the user is logged out.