How to setup Windows Authentication Support in CDB

Legacy ID:KA392449

 When using “Windows Authentication” with SQL Server two components in CDB must be updated to also use “Windows Authentication”.  Then to connect to the SQL Server database an ODBC Data Source using  “Windows Authentication” must be created. 

Therefore, to configure CDB to use Windows Authentication when connecting to a MS SQL Server, three components need to be configured.

Step 1: Configure the CDB Services IIS “Application Pool” to run under a service account that has permissions to the MS SQL Server database.

Step 2: Configure the CDB Workflow Windows NT Service to run under a service account that has permissions to the MS SQL Server database.

Step 3: Create a System DSN via automator that uses Windows Authentication to establish a connection to the MS SQL Server database.

Please follow the screen shots below to perform the configuration for each step listed above:

Step 1: Configure the CDB Services IIS “Application Pool” to run under a service account that has permissions to the MS SQL Server database.

1. Open the “Server Manager”, expand “Roles”, and click on “Internet Information Services”

2. In the “Connections” panel, click on “Application Pools”

3. In the “Application Pools” panel, click on “BMCCDBServicesAppPool”

4. In the “Actions” panel, click the “Advanced Settings…” hyperlink         

5. In the “Advanced Settings” dialog under the “Process Model” group, select the “Identity” property and click the button on the right […]

6. In the “Application Pool Identity“ dialog, select the “Custom account” radio button, and then click the “Set…” button.

7. Very Important: In the “Set Credentials” dialog, enter the service account and password of a user id that has permissions to access the CDB MS SQL Server database, click OK.

8. Verify the “Custom Account”, and click OK.

9. Verify the “Identity”, and click OK.

10. Verify the “Application Pool” identity, and Stop/Start the application pool from the “Actions” panel on the right.

11. IIS is now configured!

Step 2: Configure the CDB Workflow Windows Service to run under a service account (same user account as in Step 1 above) that has permissions to the MS SQL Server database.

1.       Open the “Server Manager”, expand “Configuration”, click on “Services”, and select “CDBWorklowService”

2.       Right click on “CDBWorkflowService”, and select “Properties”

3.       In the “CDBWorkflowService Properties” dialog, click the “Log On” tab, and then select the “This account” radio button.

4.       Very Important: Enter the service account and password of the user that has permissions to access the CDB MS SQL Server database, click OK.

5.       Using the toolbar buttons above, restart the “CDBWorkflowService” service.

6.       The “CDBWorkflowService” configuration is complete.

Step 3: Create a System DSN via automator that uses Windows Authentication to establish a connection to the MS SQL Server database.

See the doc at the following link for detailed instructions on setting up SQL Server ODBC Data Source using Windows Authentication:

https://bmcapps.my.salesforce.com/articles/sc_Solutions_to_a_Product_Problem/Inquira-KA391030/p