Configuration Server-Based Model Login with Microsoft Authentication

Introduction:

In ZIEWeb, users have an option “Automatically log users on to Z and I Emulator for Web using their Windows username” for the Configuration server-based model to enable the login option with Windows credentials. By enabling the same option in ZIEWeb Client, users can log into the configuration server-based model page with Microsoft credentials.

Create Configuration Server-based Model in DW for ZIEWeb Client

Select the Configuration server-based model in the deployment wizard and enable the “Automatically log users onto Z and I Emulator for Web using their Windows username” option.

Then, select any one of the following Logon type options and click Next:

• Users are from the Windows domain: It is optional. If needed, enter the dummy value.
• Create a User ID, if it does not exist?
  • Yes - Enter the group name where the user needs to be created.
  • No – Choose this option, if the user already exists.

Follow the below steps to set up the ZIEWeb Client:

1. Register the ZIEWeb Client application in Microsoft Azure AD using Microsoft credentials. 
2. After registration, get the ClientID & RedirectURL and configure it in ZIEWeb Client build (EAR/WAR – need to update Client ID and RedirectURL in web.xml file).
3. After configuration, launch the Configuration server-based model in ZIEWeb Client. 
4. While launching the Configuration server-based model, Microsoft Authentication will pop up. Here, users need to provide MS credentials to log in. 
5. Once login is successful, the Config server-based model page will be launched. 
6. For the first time log-in, the user will be created with the name of MS mail ID’s first half under the mentioned group. 
7. If the mail ID name part contains characters other than a dot(.) and a hyphen (-), the special characters are replaced with a hyphen (-). 

Note:

• If the user does not configure the application with ClientID and RedirectURL, then the MS authentication fails and a warning message pops up like, “Configuration not done properly/wrong credentials”.
• While launching ZIEWeb Client, check the user in the mentioned group. If the user already exists, the page will be launched.
• If the user does not exist in the mentioned groups, it will create a new user in the mentioned groups.
• While creating a user, check in the ZIEWeb user/group window whether the “Allow users to create accounts” checkbox is selected. 
• If “Allow users to create accounts” is checked, users will be created in the mentioned groups.
• If “Allow users create accounts” checkbox is clear, the ZIEWeb Client page and a warning message for an authentication exception will go through.
• If the mentioned groups do not exist in the ZIEWeb user/group, the ZIEWeb Client page will show a warning message for the “group does not exist” exception.
• Go with this option, only when the user exists in any group. 

If a user exists, the ZIEWeb Client page will be launched, or else the page pops up a warning message for the “user does not exist” exception.