How to set up Contact Expert database connections to use Windows Authentication
Contact Expert is able to use Windows Authentication to connect to the databases. To use this feature, please follow the guide below.
Step-by-step guide
Configure the SQL server
- Grant permissions for the Active Directory user which will run the Contact Expert server components
Configure the ODBC Data Sources
- Log on to the CE Core Host
Configure ODBC data sources:
The number of the Contact Expert related ODBC data sources may vary depending on the installed Contact Expert server components. In case of a full installation, three data sources exist:
- ACE_Servers
- ACE_Web
- ACE_TeleProxy
The below steps must be performed for each Contact Expert related data source on the Core Host. If there are Contact Expert components using System DSNs installed on other computers (e.g. legacy Script Designer), every one of them needs to be configured as well.
- Open Administrative Tools
- Select ODBC Data Sources (32-bit)
- Go to the System DSN tab
- Select a Contact Expert related data source
- Click Configure... to open the configuration wizard
- Select the With Windows NT authentication using the network login ID option
- Choose Change the default database to: option and select ACESystem from the dropdown list
- Finish the configuration wizard and save the changes
Reconfigure database connection settings
Some Contact Expert components can operate correctly only if the username and password properties used for database connection are not empty in their configuration. Since Windows Authentication does not use these parameters, they can (and must) be set to dummy values (e.g. "DummyUser" / "MyDummyPassword") instead of leaving them empty.
- Double-click the CE Tools shortcut located on the desktop and launch CE PowerShell as administrator.
Execute the following commands:
Set-CESystemDatabaseProperties -Fqdn "[CE Database Host FQDN]\[Instance Name]" -Port "[Port Number]" -DatabaseName "ACESystem" -Login "[DummyUser]" -Password "[DummyPassword]" Set-CEReportDatabaseProperties -Fqdn "[CE Database Host FQDN]\ Instance Name]" -Port "[Port Number]" -DatabaseName "ACEReport" -Login "[DummyUser]" -Password "[DummyPassword]"
Edit the configuration files of the following Contact Expert components as per the followings:
Component | Path | Change |
---|---|---|
CEAgent | \Agent\web.config | Add Integrated Security=SSPI; after MultipleActiveResultSets=True; (3 occurrences) |
ManagementService | \ManagementSvc\web.config | Add Integrated Security=SSPI; before Connection Timeout= (2 occurrences) |
DBConnectorServer | \Servers\DBConnectorServer\DBConnectorServer.exe.config | Add Trusted_Connection=True; before Connection Timeout= (2 occurrences) |
AgentFactory | \Servers\AgentFactory\agentfactory.ini | Add integratedSecurity=true; after applicationName=AgentFactory; (1 occurrence) |
EmailConnectorServer | \Servers\EmailConnectorServer\email.connector.server.ini | Add integratedSecurity=true; after applicationName=EmailConnectorServer; (1 occurrence) |
MediaMiner | \Tools\MediaMiner\MediaMiner.Config.xml | Add integratedSecurity=true; after applicationName=MediaMiner; (1 occurrence) |
ClientAccessServer | \Tomcat\webapps\ClientAccessServer\WEB-INF\web.xml | Find <param-name>SystemDB_ConnectionString</param-name> and add integratedSecurity=true; to the <param-value>...</param-value> element (1 occurrence). Find <param-name>ReportDB_ConnectionString</param-name> and add integratedSecurity=true; to the <param-value>...</param-value> element (1 occurrence) |
Tomcat | \Tomcat\conf\server.xml | Add integratedSecurity=true; after applicationName=ACEReporting; (2 occurrences) |
- Restart CE in CE Server Manager
Related articles
- How to enable Windows Authentication for Contact Expert Part I - CE Portal
- How to enable Windows Authentication for Contact Expert Part II - CE Agent Dashboard
- How to enable Windows Authentication for Contact Expert Part III - Address Book Service
- How to enable Windows Authentication for Contact Expert Part IV - Servers