416.467.9100 | Dundas Data Visualization | Login
Welcome Guest
Dashboard v5.0

This site makes extensive use of JavaScript.

Please enable JavaScript in your web browser and reload the page before proceeding.

Using Windows Login to Access Dundas Dashboard

Hide navigation
RSS
Modified on Wed, 12 Feb 2014 04:36 PM Categorized as Configuration
Click to return to: Documentation | Installing and Administering Dundas Dashboard


Overview

Dundas Dashboard lets administrators create user accounts that use login information from Windows. This allows Windows domain users to:

  • Log in automatically just by navigating to the Dundas Dashboard URL.
  • Or, simply click the Windows Login button on the Login screen to log in.

Note: Windows Group account logins are only allowed to use the Viewer license.

Tip: watch the how-to-video: Windows User Login

Preparation

Enable Windows Authentication in IIS

Make sure that Windows Authentication is enabled in IIS.

Typically, the default installation of IIS 7 does not include the Windows Authentication role service. To use Windows Authentication on IIS, you must install the role service, disable Anonymous authentication for the WindowsAuthentication folder in the Dundas Dashboard web site or application, and then enable Windows Authentication for the folder.

Settings for the WindowsAuthentication folder in IIS 7.

Settings for the WindowsAuthentication folder in IIS 7.


See these Microsoft articles for more details:


For further details on IIS settings, please see our Windows Authentication Troubleshooting article:

Add Windows domain user accounts in Dundas Dashboard

Add Windows User or Group accounts in Dundas Dashboard as follows. The Windows user or group must be part of a Windows domain. See Managing Users for more details.

  1. Log in to Dundas Dashboard using an administrator account.
  2. Click Administration in the Sidebar.
    Administration button.
  3. Hover over the User Accounts item with your mouse, then click the menu button. From the menu, select Add Windows User (or Add Windows Group).
    Add Windows User.
  4. Enter the necessary information and click Save.
  5. Close all instances of Dundas Dashboard.

Update the Dundas Dashboard Configuration File

Some changes to the Dundas Dashboard Configuration File are required as described next.

Enable Windows Authentication Mode

  1. Open the folder that Dundas Dashboard installed to (default: C:\Program Files\Dundas Data Visualization Inc\Dundas Dashboard\Instance1).
  2. Open the \www subfolder.
  3. Right-click on the file Dundas.Dashboard.config, select Properties.
  4. Uncheck "read-only", click OK.
  5. From the Start Menu, choose Run.
  6. Type "notepad" and press Enter.
  7. Drag and drop the .config file into the notepad.
  8. Look for the authenticationMode key, uncomment it if necessary, and set its value to LocalAndWindows.
    <key name="authenticationMode" value="LocalAndWindows"/>

    Tip: The line of code below will not work, as you first need to remove the start and end comment tags.

    <!-- <key name="authenticationMode" value="LocalAndWindows/> -->
  9. Save and close the file.
  10. Right-click on the file, select Properties.
  11. Check “read-only”.
  12. Restart the Dundas Dashboard website.

The Windows user you added will be logged into Dundas Dashboard automatically the next time they navigate to its URL.

If you don't want the Windows user to be logged in automatically, set the autoWindowsLoginEnabled key to False in the Dundas Dashboard Configuration File (as part of Step 8 above). In this case, your Windows user will see the Dundas Dashboard Login screen with a Windows Login button enabled. Simply click the button (without entering any credentials) to log in to Dundas Dashboard.

Windows Login button.

Windows Login button.


Set Active Directory Binding Mode

If you want to allow Active Directory queries to be sent specific domain controllers instead of the Default domain, change the following:

  1. Open the folder that Dundas Dashboard installed to (default: C:\Program Files\Dundas Data Visualization Inc\Dundas Dashboard\Instance1).
  2. Open the \www subfolder.
  3. Right-click on the file Dundas.Dashboard.config, select Properties.
  4. Uncheck "read-only", click OK.
  5. From the Start Menu, choose Run.
  6. Type "notepad" and press Enter.
  7. Drag and drop the .config file into the notepad.
  8. Look for the activeDirectoryBindingMode key, uncomment it if necessary, and set its value to Domain.
    <key name="activeDirectoryBindingMode" value="Domain"/>
  9. Save and close the file.
  10. Right-click on the file, select Properties.
  11. Check "read-only".
  12. Restart the Dundas Dashboard website.

Note: The account which Dundas Dashboard is running under must have access to query the Active Directory servers on both domains.

Explicit Windows Login

In Dundas Dashboard 5 or later, there is a new authenticationMode option called LocalAndWindowsExplicit.

If you set this option in the configuration file, both local and Windows logins are allowed, but users must explicitly enter their username and password. There is no Windows Login button in the Login Screen in this case.

You log in the same way as in the regular Local authentication case, except the Windows username must be specified in the User Name box with this format: DOMAINNAME\username

Windows Login (explicit mode).

Windows Login (explicit mode).


Tip: This works in Silverlight and HTML.

Limitations

  • Windows Login works with IIS 6.0 and higher. Windows Login will not work if you are evaluating Dundas Dashboard on a Windows XP machine. Please see our System Requirements for more details.

  • By default, Dundas Dashboard does not support nested Active Directory (AD) groups. When you add a new Windows group, only users who are direct members of the group are added. Users within any subgroups or nested groups are not added. However, in Dundas Dashboard 5 or later, there is a new experimental activeDirectoryBindingMode option in the Dundas Dashboard Configuration File that enables support for nested AD groups.

  • Dundas Dashboard does not support an Active Directory group that contains users from different Windows domains. (Windows Login will work for users from the domain of the Windows group but not for users from other domains.)

Notes

  • For Windows Authentication to work, the user account under which the IIS Application Pool runs must have access to query the domain’s Active Directory server. Typically, only domain accounts have such access.

Related topics


Click to return to: Documentation | Installing and Administering Dundas Dashboard

About Dundas | Contact Us Follow us on Twitter! | Privacy Statement | Report Site Issues

Copyright © 2009-2014 Dundas Data Visualization, Inc.