Forms Authentication

IMPORTANT: Before you begin, install .NET framework v4.5 on the server machine.

The following procedures are for deploying Forms authentication:

Enable Forms Authentication in IIS

Open IIS Manager. The easiest way is to search for IIS in the Start menu on the server machine.
In the Connections pane on the left-hand side, expand the connections until you see the Wavepoint site.
Click the Wavepoint site once to highlight in blue, then double-click the Authentication icon.
Ensure the following options are enabled or disabled:
- Anonymous Authentication: Enabled
- ASP.NET Impersonation: Disabled
- Basic Authentication: Disabled
- Forms Authentication: Enabled
- Windows Authentication: Disabled

Specify the Connection String

In Windows Explorer, navigate to C:\inetpub\wwwroot\Wavepoint and open Web.config in a text editor (Notepad++ or XMLSpy). In the Web.config file, update the existing default connection string for your server. For example:

<connectionStrings>
    <add name="DefaultConnection" connectionString="Server=172.18.230.55\arcgis2k8r2;Database=MinervilleFiber;
user id=aspnet;Password=aspnet;" providerName="System.Data.SqlClient"/>
</connectionStrings>

Enable Forms Authentication in the Web.config

If necessary, navigate to C:\inetpub\wwwroot\Wavepoint and open Web.config in a text editor (Notepad++ or XMLSpy). There, you can set the authentication mode as Forms.

<authentication mode="Forms">
    <forms loginUrl="~/Account/Login" timeout="2880" requireSSL="true" />
</authentication>

IMPORTANT: For security reasons, when using Forms authentication, Secure Sockets Later (SSL) is required. The phrase 'requireSSL="true"' ensures Wavepoint does not function without SSL. This phrase can be removed from the Web.config. However, use extreme caution when removing it. It should only be removed if you are certain of the security of your working environment. Schneider Electric strongly discourages the removal of this phrase and considers it security violation.

Create and Manage Users

For user management, you must create a new database instance and execute an SQL script. Note that Oracle is not currently supported for Wavepoint user management. Therefore, Schneider Electric recommends running these scripts against SQL Server Express or something similar.

IMPORTANT:

If you are using Windows/AD Authentication, the Logoff, Registered Users, and Register New User buttons are not available in the Wavepoint application.
If you are using Forms Authentication, those buttons are available in the Wavepoint application.

Create New Database Instance

Open MS-SQL Server Management Studio on the machine that hosts the database.
In the Connect to Server dialog, select the Server Name and Authentication. Enter authentication credentials, if necessary. Then, click Connect.
Right-click on the Databases folder, then select new Database.
Type a Database name, then click OK.
Expand the Databases file folder and highlight the new database you created.

Locate and Run SQL Script

In this step, you Run/Execute a file called “create schema,” which by default is stored in C:\inetpub\wwwroot\Wavepoint\App_Data\.

IMPORTANT: References to “dbo” in the script refer to the schema owner. If the schema owner is different at your organization, edit the Create Schema script with the correct value for the schema owner prior to execution.

To run the script, follow these steps:

In MS-SQL Server Management Studio, on the File Menu click Open > File.
Navigate to the location of the "create schema.sql" script. By default, this file resides in C:\inetpub\wwwroot\Wavepoint\App_Data\ on the machine where Wavepoint was installed.
Highlight the “create schema.sql” script, then click Open.
Ensure that the name of your new database is displayed in the drop-down box next to the Execute button. If it isn't, the script does not execute against that database.
Run/Execute the script.

Configure the Database Connection String in IIS

Open IIS Manager. The easiest way is to search for IIS in the Start menu of the server machine.
Expand the Sites folder, expand Default Web Site, and click once on Wavepoint to highlight it.
Double-click Connection Strings.
Click the DefaultConnection once to highlight it, then click Edit.
Populate the Edit String Connection dialog with your database information. Ensure you click the Custom button and enter the connection string for your database. The ID and Password are the values set up in the “create schema.sql” script.
Click OK.

Register New User and Verify Login

Open a web browser and navigate to the Wavepoint application at https://[WAVEPOINTSERVER]/wavepoint.
Log in as an Administrator.
Once the Wavepoint screen appears, click on the admin user name.
From the Account Management page, click on Register New User.
Fill out the form with the required information, then click Register.
Log in to a new instance of Wavepoint using the new user credentials. Verify the login is successful.