ProjectWise User Synchronization Service (USS) will create datasource users for you automatically, using one of the following sources:
In scenarios where the ProjectWise Integration Server and other back end services are in one domain, and user accounts that need to use ProjectWise belong to another, a trust relationship between the two domains must be in place. This trust should be configured as ‘two-way’, meaning that users from one domain can log into resources belonging to the other domain, and vice versa. This guide assumes that a trust relationship between your primary and external domains is already in place. Additional information regarding Active Directory Domains and Trusts are available on Microsoft TechNet.
1) Identify a domain account for use as your service account. Ensure that this account has a secure password, and set the ‘Password never expires’ flag, if permitted by your organization’s security policy.
2) Verify that this account on the domain. You can test the service account by using a desktop shortcut.
3) Install the ProjectWise User Synchronization Service on a system is joined to the same domain as your ProjectWise Integration Server. Administrators commonly install the component on their Integration Server, but it is not a requirement to do so.
4) When prompted, provide the domain user account credentials you identified in previous steps.
5) During installation of the service, you will be prompted to provide a ProjectWise logical user account. This account should be configured as a delegate user. It will be used to access the datasource and add the users to the ProjectWise database, so permissions for this account should be set appropriately.
6) Create a security group for your ProjectWise users in Active Directory, then add users to this group.
1) Verify that the service account can log into resources in the trusted domain.
2) Create a security group for your ProjectWise users in Active Directory for the trusted external domain.
3) Add users from the trusted external domain to this group.
The User Synchronization Service Administration tool is installed on a system with ProjectWise Administrator as an add-in extension. Open ProjectWise Administrator after installing the component and log into your datasource. A new option ‘Windows Security Service’ has been added to the navigation tree on the left.
1) Expand the menus ‘Windows Security Service’ and ‘Synchronized Accounts’. Select ‘User groups’.
2) Right click on ‘User Groups’. Select ‘New > Synchronized User Group’.
3) Click ‘Next’.
4) If the User Synchronization Service is running on the local computer, select ‘Use Local Computer’, otherwise, type the name of the computer that is hosting the service. (Typically the Integration Server). Click ‘Next’.
5) In the pull-down, select your Primary domain, then locate the group you created for users in the primary domain in the list. Click the ‘Add >>’ button to add to the list. Click ‘Next’, then ‘Finish’.
6) Repeat steps 2 – 5, selecting the Trusted External domain and add the group which contains your external trusted domain users.
7) Select ‘User Synchronization Service’ in the navigation tree on the left. Right click on this item, then select ‘Synchronize Accounts’. Confirm when prompted.
The system will start the synchronization process, which can take a few minutes, depending on how many users you added to the groups. You can see the accounts that have been synchronized by selecting the ‘Users’ icon in ProjectWise Administrator.