How to set up monitors on production lines

In the Nexeed Industrial Application System a default identity provider must be defined so the login mask is skipped and the Windows user is automatically logged in to the identity provider. If the Windows user is not automatically logged in to the identity provider and the selection of a user appears with the identity provider, the single sign-on function must be configured in the browser.

Configuring the automatic login to the identity provider with the Windows user

In order to realize the automatic login, an identity provider is required. The identity provider must be configured in the Multitenant Access Control module and must be configured as the default identity provider.

Identity providers

Alternatively, the default identity provider can be passed to the Nexeed Industrial Application System via the query parameter preferred_idp. The query parameter preferred_idp must be appended to the URL.

Example:

https://<server>?<parameter>; &preferred_idp="Identity provider"

If a default identity provider is defined but another user is to be logged in, an invalid identity provider can be written to the preferred_idp query parameter. The login mask is then displayed again and another user can be logged in.

Example:

https://<server>?<parameter>; &preferred_idp="undefined"

If the Single Sign-On feature is not configured in the browser, the identity provider displays a user selection. The Single-Sign-On functionality must be configured in the browser so that the Nexeed Industrial Application System automatically logs the Windows user on to the identity provider.

A cookie banner is displayed in the Nexeed Industrial Application System. The user must accept the cookies so that the cookie banner is no longer displayed when logging in again.

Accept or reject cookies in the cookie banner

The cookies are saved depending on which selection is made. A new preference query is displayed:

Set cookie manually in the browser

Alternatively, the do-consent cookie can be set manually in the browser for the Nexeed Industrial Application System.

Example:

do-consent: \{“consent”:\{“convenience”:true,”analysis”:false,”marketing”:true,”custom”:[]},”timeToLive”:365,”timestamp”:1706715823318,”version”:4}

The automatic logout from the Nexeed Industrial Application System is set to 5 minutes of inactivity by default. After the set time, an automatic logout is triggered by the portal.

The command line parameters for the browser can be stored in the autostart folder of the operating system by using a script.

Run browser in full screen mode or kiosk mode

The full screen mode or the kiosk mode can be realized via the command line parameters of the browser. If the browser is to be run in protected kiosk mode, additional settings must be configured in the browser. More information about the kiosk mode of the browsers can be found in the documentation of the providers.

Add command line parameter URL

The URL must be added in quotation marks after the command line parameter of the browser.

Running Nexeed Industrial Application System in full screen mode

In order to run the Nexeed Industrial Application System in full screen mode, the query parameter maximize_content=true must be appended to the browser URL.

https://<host>?<parameter>&; maximize_content=true

Set default identity provider

If the default identity provider is handed over with the URL, the query parameter preferred_idp must be appended to the browser URL

<<configuring_the_automatic_login_in_the_nexeed_industrial_application_system[Configuring the automatic login in the Nexeed Industrial Application System]

Example:

https://<host>?<parameter>&maximize_content=true&; preferred_idp="Identity provider"

"Pick an account" screen is shown

When Active Directory or Entra ID is used, a "pick an account" screen may be shown instead of successfully logging in automatically. This is caused by an explicit logout at the identity provider that has previously been performed on the device, during which the cookies AADSSOTILES and ESTSSOTILES are set by login.microsoftonline.com to remember this explicit logout.

To avoid this behavior even when explicit logouts are triggered on the device, the cookies AADSSOTILES and ESTSSOTILES must not exist. This can be achieved by regularly (re-)opening a new incognito session (Hint: ambient login may be disabled in incognito sessions). Another alternative is using tools to filter, block or cleanup specific cookies.

Parts of the dashboard or modules display error messages

The Nexeed Industrial Application System restarts and is displayed correctly after 5 minutes at the latest.

By default, the single sign-on timeout is set to 10 hours. To avoid this behavior, close and reopen the browser before the single sign-on session expires.

Automatic login does not work in private/incognito sessions in the Edge Browser

Environment authentication is not enabled by default in a private/incognito session.

Environment authentication can be enabled in the registry database.