10.0

© 2011 ABBYY. All rights reserved.
60
This method requires minimal configuration and is suitable for scenarios where all FlexiCapture components and users
are in the same domain.
If the whole system or some of its components are outside of the domain, then a pass-through authentication should be
used for the standard IIS authentication. The general principle of the pass-through authentication is as follows: for the
user of computer M2 working under a local account M2/User[password] could be authorized at the computer M1, this
account should be duplicated at the computer M1 up to a password (that is, M1/User[password] should be created).
Example of using pass-through authentication
For example, the Processing Station is installed on the computer M1 which is not included in the domain of the Applica-
tion Server. In this case, a local user M2\User[password] must be created on the computer M2 where the Application
Server is installed and the same local user must be created on the computer M1: M1\User[password]. Then the service
of the Processing Station must be started under the M1\User[password] account. Now the Processing Station can be au-
thenticated on the computer where the Application Server is installed.
Note: If where the Application Server is installed outside the domain, the setting up is time-consuming, though it is pos-
sible to work in such a configuration. For this, it is necessary to start the IIS pools and the services of the Application
Server and the Processing Stations under specially created local Windows accounts and configure pass-through authen-
tication for these users on all computers of the system.
2. Authentication by means of FlexiCapture. In this case, FlexiCapture Authentication Module is installed in IIS. This
module performs user authentication based on information which is stored in a FlexiCapture database. This allows you
to use user accounts which are not related to Windows user accounts.
This method is convenient for users located outside the domain where the Application Server is installed, e.g. for opera-
tors who work remotely over a web-based interface.
If this authentication method is used, a web-based interface for login to the system (http://<server name>/login) is also
installed. This is a single entry point for web-operator using which new operators can self-register in the system and re-
quest access rights to the stations.
Users of FlexiCapture stations processing interactive stages (scanning, verification, etc.) can use both types of authentication. The
Processing Server and Processing Stations can work only with standard IIS authentication.
Note: In IIS, requests to the Application Server are processed by the <Default Site>\FlexiCapture10\Server\WebServices.dll li-
brary which is available both with Windows and Basic authentication. During the installation of FlexiCapture Authentication
Module, the <Default Site>\FlexiCapture10\Server\WebServicesExtrenal.dll is also installed. This library is a copy of WebSer-
vices.dll, but it is available when using FlexiCapture authentication. Thus, the Application Server is available to all system com-
ponents at the same time both with standard authentication and with FlexiCapture authentication. When the user on whose com-
puter the workstations are installed tries to open a project, he is prompted to choose which authentication to use to access the Ap-
plication Server. Web-clients can also work with both authentication types; the type being used is determined by using the key
UseCustomAuthentication in the file web.config on each web-station: if the key is set to true, authentication is performed by
means of FlexiCapture, if the key is set to false, standard means of authentication is used. By default the key is set to false if
FlexiCapture Authentication Module is not installed, otherwise the key is set to true.
To use only standard IIS authentication (the first method), the Authentication Module feature must be disabled during the insta
lla-
tion of
FlexiCapture servers (the feature is disabled by default). To use FlexiCapture authentication (the second method), this
feature must be selected when installing servers, or you can install it later via the Control Panel (Control Panel –> Program and
Features -> Modify).
Creating a database
After you install the program and activate the license, it is necessary to configure the system, the first step of which is to create a
database.
Important! Under Windows Vista, Windows 2008 or later versions, a database must be created with UAC disabled
. If UAC is
not disabled, a database can be created, but the Application Server will not be able to connect to it.
1. On the computer where the Application Server is installed, open the Service -> Application Server page of the Ad-
ministration and Monitoring Console (http://<server name>/FlexiCapture10/DBConnection.aspx) under a user ac-
count with privileges of Windows administrator.