Efficient user sign-in with Single Sign-On (SSO)
The Single Sign-On (SSO) function in portier®VISION signs you in with your Windows account. You start the software and carry on working. There is no second sign-in.
How does it work?
At startup, Vision reads the name of the Windows account you are signed in with. If a Vision user carries that name as its user ID, the program opens with no sign-in window. Upper and lower case do not matter. The domain name is not part of the comparison. Only the account name is compared. If nothing matches, the usual sign-in window appears.
Setting it up
In Vision, open System > Benutzerverwaltung (user administration). Enter the Windows account name as the user ID, spelled exactly as Windows spells it. Nothing else is needed. There is no switch for SSO. The sign-in works as soon as both names match.
Password and permissions
The password stays stored on the Vision user. Vision simply does not check it while the Windows sign-in matches. As soon as the sign-in window appears, the password applies again. That happens after you sign out, for example, or on a machine running under a different Windows account. Choose it as carefully as any other password.
Your permissions come from the Vision user. Roles per building and locking system decide what you can see and change. Windows supplies the name and nothing more. A Windows group grants no permissions in Vision.
Signing in to the portier Vision Companion
The portier Vision Companion uses the same Windows account. When its sign-in window opens, it tries the Windows sign-in once on its own. The Sign in with Windows account button repeats the attempt.
If you start the Companion from Vision, through System > Personaldatenimport or System > Anlagenimport (XML), it takes over your open Vision session. No sign-in window appears at all. This needs Vision 5.7.1 or newer.
If the Companion finds no Vision user for your Windows account, the sign-in window stays. A click on Sign in with Windows account names the reason. The same applies to a deactivated account and to an account with no Vision role. The database configuration stays reachable without signing in.
Benefits of Single Sign-On in portier®VISION
Time savings: No repeated entry of sign-in details.
Convenience: One Windows sign-in covers Vision and the Companion.
Control: Permissions stay with the Vision user. Windows has no say.
Note: this article is about signing in to portier Vision. For how portier Vision connects to the database without a stored password, see Database sign-in without a stored password.