User logon procedure using the SIMATIC Logon Service.

SIMATIC Logon can be used to configure the associated roles and functional authorizations (role management) for a SIMATIC application. This configuration is stored in the database of the SIMATIC application.

SIMATIC Logon performs Windows user authentication during application runtime; the procedure is as follows:

• When prompted by a SIMATIC application (1), the SIMATIC Logon Service opens a logon dialog (2). The user enters his or her name, password and domain. The logon data are sent to the user administration of the operating system (3), which then reports the authentication attempt event to the logon service (4).
• The logon service records all events in an event log (5), for example successful logon, failed logon attempts, logoff by the user, automatic logoff and password change.
• If authentication is successful, the SIMATIC Logon Service sends this information, including the Windows group membership, to the SIMATIC application (6), which maps the roles and associated functional rights within the application (7).

Electronic signature

The electronic signature means that operations cannot be performed until enabled by a previously authorized user. Authorization is assigned in the application by associating the users grouped at operating system level with the group with the operations.

Note:

At the moment this function is implemented as a system function only on SIMATIC BATCH. The electronic signature can, however, also be flexibly implemented for specific applications.

Development Kit

The Development Kit uses an example to show the programmer how to embed SIMATIC Logon into a customer application.