Skip to Main Content
AVEVA Product Feedback


ADD A NEW IDEA

Security

Add configurable defaults for PI Point "Pointsecurity" and "Datasecurity"

Read access to the PIPOINT table is required for most identities. Pointsecurity and Datasecurity currently use the settings on the PIPOINT table as the default. New points will generally give read access to most identities because of these default...
Guest about 4 years ago in Security 3 No status

Introduce compatibility between PCS AIM and Azure national cloud deployments

Currently, Platform Common Services (PCS) for the PI System is incompatible with Azure national cloud deployments (e.g. A U.S. government Entra ID instance) due to limitations with Microsoft Graph global service, upon which PCS AVEVA Identity Mana...
Ryan Biggins 10 months ago in Security 0 No status

 Add OAuth 2.0 Token Exchange (RFC 8693) Support to PCS for PI

Add native support for the OAuth 2.0 Token Exchange (RFC 8693) grant type in Platform Common Services (PCS) for PI when integrated with external identity providers such as Microsoft Entra ID. AIM must support exchanging externally issued access to...
Lubos Mlcoch 9 months ago in Security 8 No status

Include the port number in service principal names (SPNs) when the port number is not (and never will be) configurable

In particular, the PI Data Archive's port 5450 is not configurable and the PI Asset Framework's port 5457 is not configurable, and both programs require SPNs. The SPNs that are expected to be assigned to the service account of the PI Data Archive'...
Guest about 1 month ago in Security 0 No status

Allow AIM to directly authenticate users from other Identity Providers without CONNECT

Currently, AIM can only use CONNECT or Microsoft Entra ID as the main Identity Provider. Configuring any other IDP requires federation through CONNECT. Allowing other IDPs to work directly with AIM without CONNECT would simplify the OIDC configura...
Guest 11 months ago in Security 0 No status

Allow mapping of OIDC clientcredential to multiple identities for Data archive

Currently, when you create a mapping in PI Data archive for OIDC client credentals, you can only assign one identity.This severely limits the granularity and forces to add new identities to existing tags to grant extra permissions and is an easy s...
Guest 11 months ago in Security 0 No status

Increase the allowed password length for AF Linked Table "Supply Password" connections

Currently the maximum password length for AF Linked Table connections using the "Supply Password" option is 15 characters. This length limitation should be increased to at least 25 characters.
Guest about 4 years ago in Security 2 No status

View in SMT which connections are OIDC in Network Manager Statistics

Possibility to identify in SMT which connections are OIDC, besides the "Is TLS" in Network Manager Statistics.
Guest almost 2 years ago in Security 0 No status

AIM (PCS) should have option to select a custom Alias name

AVEVA Identity Manager app (PCS) should have option to select a custom DNS Alias name through the UI.
Guest about 1 year ago in Security 2 No status

PI Builder security alignement

We have some user that are able to edit some fields in AF using System explorer but they cannot do it using PI Builder (that require database access). Please align PI Builder access and PI System explorer because the actual situation is a nonsense
Guest over 1 year ago in Security 0 No status