000035982 - How to set up an RSA Archer to Archer data feed for Windows Authentication

Document created by RSA Customer Support Employee on Feb 7, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035982
Applies ToRSA Product Set: Archer
RSA Product/Service Type: Archer Administrators
IssueArcher to Archer data feed for Windows Authentication.
TasksThe RSA Archer Web Services Transporter has the ability to use Windows accounts for authentication. This document describes the actions to perform in two components: IIS and the Data Feed configuration itself.

Set up IIS

Data feeds use API calls, which accesses the web server on the /ws folder of the website (https://www.archer.com/ws). The WS folder of the Archer site in IIS needs to be set up for Windows Authentication.

  1. Open IIS
  2. In the left pane, expand the Archer web directory and select the WS folder
  3. Double-click the Authentication icon under the IIS section in the middle pane
  4. Disable Anonymous Authentication and enable Windows Authentication
  5. Perform an IISRESET
IIS authentication of the WS folder

Data Feed configuration

When IIS’s WS folder is configured for Window Authentication, the Archer Web Services Transporter (Archer to Archer data feed) will use either the service account credential or a specific user credential to authenticate to the web server. This is set in the Security section on the Transport tab in the data feed

  • If credentials are set to Anonymous/Service Account User, the service account running the job is sent with the data feed request. See blue highlights in figure below
  • If credentials are set to Specific, the specified Windows account credentials are sent with the data feed request. See green highlights in figure below
    • Selecting “Use Windows Authentication” in the Transport Configuration will use the account specified in the Security section to retrieve the data (e.g. the account that has rights to read the report the DF is based on.) See orange highlight in figure below

Data feed transport tab configuration page