Configuring the Datacap Server service to use an external authentication system

You can configure the Datacap Server service for external authentication. When you open the Datacap Server Manager, you can select the ADSI, ADLDS, LDAP, or LLLDAP authentication method.

In a client/server environment, you can configure Datacap Server service to use an external authentication provider, rather than using the default Datacap authentication (TMA) option.

To configure Datacap Server service to use external authentication:

  1. With the Datacap Server Manager window open, stop the service.
  2. Click the Datacap tab and click Show advanced.
  3. In the Authentication system field, select the type of authentication that you want to use.
    Option Description
    ADSI authentication Select this option if you are running Windows Active Directory for authentication. The Active Directory server must be part of the domain in which the Datacap computers are located. Select this option when you do not want all users that are logged in to a Windows domain to retype their passwords when they log in to Datacap.
    AD LDS authentication Select this option if you are running Windows Active Directory Lightweight Directory Service for authentication. The AD LDS server can be outside of the domain in which the Datacap computers are located.
    LLLDAP authentication Select this option, rather than LDAP, when you are using authentication providers other than Windows Active Directory for authentication. Select this option when you are using providers such as Oracle Directory Server Enterprise Edition (formerly known as Sun Directory Server Enterprise Edition). The LLLDAP server can be outside of the domain in which the Datacap computers are located.
    LDAP authentication Select this option only if you require that your LDAP server is accessed by using the Distinguished Name (DN) of a directory object and the complete LDAP path name. The LDAP server must be part of the domain in which the Datacap computers are located.
  4. Enter the string in the Authentication path template field that is appropriate for your authentication type.
    You can modify the default path that is shown in the following table for each authentication option that is based on the specific address requirements in your environment. The Datacap Server service reads this path entry to determine the credentials for the particular account. For example, when you configure Active Directory authentication, Datacap looks up the user in Active Directory by using syntax similar to WinNT://<%domain%>/<%user%>. The <%domain%> and <%user%> entries are automatically replaced with the login domain of the user account and the user account.
    Important: As shown in the table, for ADLDS and LLLDAP options only, you must enter actual values in the template path for %server%, %port%, and %domain%. The <%user%> variable entry must be retained as shown. As an example, you might enter a template path, server01:1099/uid=<%user%>,dc=domain02,dc=Com.
    Option Description
    ADSI authentication Select one of the following strings to enter based on whether you require password entry:
    • WinNT://<%domain%>/<%user%>
    • WinNT://<%domain%>/<%user%>?password:enabled
    AD LDS authentication Enter %server%:%port%/uid=<%user%>,dc=%domain%,dc=Com
    LLLDAP authentication Enter %server%:%port%/uid=<%user%>,dc=%domain%,dc=Com
    LDAP authentication Select one of the following strings to enter based on whether you require password entry:
    • LDAP://<%domain%>.com
    • LDAP://<%domain%>.com?password:enabled
  5. Click Save to save your authentication path entry.
  6. Click the Service tab and then click Start to start Datacap Server service.
  7. Close the Datacap Server Manager window.