Set the external interface mapping for Windows authentication

When sends an alert to the portal, the IDO runtime system is used to connect the back office to the portal. The Windows account specified for the external interface must be the account used by the IDO runtime system.

IDO runtime may have been configured under a Windows user account or a Windows machine account. Before you can set the external interface mapping, you must determine the account type.

  1. Select Start > Administrative Tools > Services.
  2. Locate the Infor Framework IDO Runtime Service.
  3. Check the Log On As column for the account. A machine account is displayed as Local System. A user account is displayed as <domain>\<user>.
  4. In the Portal Manager, select Portal Configuration > External Interface. The Windows Authentication tab is opened by default.
  5. Click New.
  6. Specify this information:
    Windows Account
    Specify the Windows account used by the IDO runtime system.
    • If IDO runtime is running under a user account, specify the account as shown in the Log On As column. Use this format: <domain>\<user>.
    • If IDO runtime is running under the Local System account, specify the account in this format: <domain>\<machine name>$. The trailing dollar sign is required.
    In either case, if the domain of the machine running IPF is different from the domain of the IDO runtime account, the domain of the machine running IPF must be configured to trust the domain of the IDO runtime account. For more information, see: https://technet.microsoft.com/en-us/library/Cc961481.aspx.
    Portal User Account
    Specify a back office user account. For example, you could specify the user account created as the sender of portal email. The account must belong to the Portal Data Admin group.
    Description
    Optionally, you can specify a description for this Windows authentication.
  7. Click OK.
  8. Click Save.
    Note: If there are problems with the mapping, this message is shown on the Event Status form: "The Windows Account <Windows account name> does not map to any IPFUser Server stack trace." If the alert is created directly by the event handler, then the event status of the event handler shows the error. If the alert is created by an IDO method or C# class, then the event status of the GenericPortalSendAlert event handler should be checked for the error.