You are here: Installation Overview > Set Up Faculty Access for the Web to Use Windows Authentication

Set Up Faculty Access for the Web to Use Windows Authentication

If you configure your Education Edge database to use Windows Authentication and it resides on a separate server, you will need to edit the Web.config file to enter a user name and password of a Windows user that can be authenticated on the domain and has access to the database. The Web.config file resides in the FAWeb7 folder created by the installation process. Detailed instructions are in the <system.web> section of the Web.config file, usually following the <authentication> sub-section as shown below:

<!--

If your database uses Windows Authentication and resides on a separate server, you will need to use the settings below, and replace the userName and password with a specific windows user that has access to SQL Server. If the database and web server reside on the same machine, then the line above is sufficient.

<identity impersonate="true" userName="administrator" password="password"/>

-->

The section will look like the example below after modification:

<!--

If your database uses Windows Authentication and resides on a separate server, you will need to use the settings below, and replace the userName and password with a specific windows user that has access to SQL Server. If the database and web server reside on the same machine, then the line above is sufficient.

<identity impersonate="true" userName="administrator" password="password"/>

-->

<identity impersonate="true" userName="windowsUserName" password="password"/>

The user set up as the impersonation user must have db_owner rights to your Education Edge database. We recommend that you create a new Windows user account and use that account strictly for impersonation. This will allow you to track all database access done through Faculty Access for the Web.

Replace windowsUserName with the user name that has access to the Education Edge database.

The password will be in clear text and can be read by anyone who has access to the Web.config file.

For security purposes, we recommend you encrypt the user name and password and store them elsewhere. For instructions, visit http://support.microsoft.com/kb and see article #329290.