File attachments
Beginning in 12.1, the ability to attach files to objects in Optiva and publish those files is determined by these factors:
-  The configuration of the 
		  
AttachmentModesetting in the<appSettings>section of the Web.config file. This file is located in the inetpub\wwwroot\FsSvcCore directory. - The configuration of DOCUMENT.ATTACHMENT File Location.
 
This table shows the default value for the 
		AttachmentMode setting for each authentication mode. 
	 
| Authentication Mode | Default value for AttachmentMode | 
|---|---|
                     Password 
				               | 
                  
                     DOCUMENT.ATTACHMENT 
				   
				               | 
               
                     Integrated Windows Authentication
					 (IWA) 
				   
				               | 
                  
                     DOCUMENT.ATTACHMENT 
				   
				               | 
               
                     Active Directory (AD) 
				   
				               | 
                  
                     DOCUMENT.ATTACHMENT 
				   
				               | 
               
                     Active Directory/Active Directory
					 Federation Services (AD/AD FS) 
				   
				               | 
                  none | 
                     PingFederate (IFS CE) 
				   
				               | 
                  none | 
The paths that you specify in the 
		DOCUMENT.ATTACHMENT File Location determine where the
		file attachments are published when the 
		Optiva
		objects are saved. 
	 
To prevent the potential for malicious security attacks against Optiva, file attachments are not supported in the
         cloud. Do not define any DOCUMENT.ATTACHMENT file
         locations if you are installing in a cloud environment. 
Suppose you try to view or save a file attachment through Optiva. When any value other than DOCUMENT.ATTACHMENT is specified for AttachmentMode, Optiva assumes
         that the request is malicious and throws an exception. A message indicates that the file
         attachments are not supported for the current configuration. 
Regardless of the 
		AttachmentMode setting, all users can add URLs to the 
		Attachments grid. As in prior
		releases, they must have the appropriate role security privileges to the 
		Attachments grid.