User Mapping (nCloudDriver-UserMapping)

This component represents an individual user mapping, which is added to the UserMappings component in the CloudAuthenticationScheme.

This component is available in the Authentication folder in the nCloudDriver palette.

User Mapping is the mapping of a request's application id directly to a station User. The request is then executed with the permissions context of that station User. User Mapping maps a client application known to Honeywell Forge to a specific station user. It used in the insecure web app id mapping approach to make a connection between the application making the request to Honeywell Forge and a traceable entity known to the station. Incoming requests containing this application id will be executed in the context of the configured station user.

 NOTE: User Mapping is strongly discouraged for numerous security and traceability concerns. 

If you must use this approach, please note that you cannot map to the station's Admin user. This is explicitly prevented by the driver.

Figure 55.   User Mapping properties
Image
 WARNING: UserMappings map only a web application to a user. This does not identify what individual user is making the request, so there is no end-to-end authentication or traceability for these requests. Due to the inherent security risk of not using end-to-end user identification when executing cloud-originated commands on the station, the use of UserMappings is not recommended. If you enable this feature, a confirmation window appears prompting you to acknowledge that you wish to proceed with the non-recommended configuration. 
Name Value Description
App Id string Defines the application ID of an application to be mapped.
User Name string Defines the name of a user in the UserService to associate with requests with this application ID.