Questions about logging into PWA with Windows Authentication

[klanglee]

I am new to Project Server and I have a question. At this point, we are
currently able to log in to PWA automatically when the
servername/projectserver url is supplied. However, when you log out, and try
to log in using your windows user name and pw, we receive the error message:

You have entered an incorrect user name/password combination. (5002)

I guess my question is: Is it possible to log in to PWA using Windows
authentication (by typing your user id and pw) instead of always
automatically being logged in? Our security dept. does not want project
users to have such easy access to the project server.

Any help would be appreciated. Thanks!
K

 

[Marc Soester]

Hi Klanglee,

In regards to your question :" Is it possible to log in to PWA using Windows
authentication (by typing your user id and pw) instead of always
automatically being logged in" in short is - Not within Project Web Access,
BUT
You may want to try the following. Go into your internet explorer under
Tools > Internet Options > go to the "Security" tab and click on "Trusted
Sites". Click on the Custom level button and scroll all the way down until
you get to:
User Authenticiation. Click on the "Prompt for user name and password". Once
applyed, this should give you what your IT Deparmtent wants. Please note that
this would also mean that all Web applicaiton which required user
authentification will prompt the user. Your IT department can put this
setting into the Group policy to enforce this setting.
Hope this is what you are after.

 

[klanglee]

Marc,
Thanks for your suggestion. When I made the change in my trusted site, I was
prompted with a Windows login box. After entering my id and pw, I was
successfully brought to the welcome page of PWA. However, when I log out and
try to log back in (on PWA's login screen), still the same error (5002)
occurs. Also, if I click on the link in the left nav bar "log in using your
windows account" I am still logged in automatically--without supplying an id
and pw. It seems as if the change which was made will only affect the user
when logging in for the first time after typing the url in the browser. Is
this just the way windows authentication is supposed set up to work with PWA?
If so, would we just need to assign all users project server id's and pw's
instead to get the security we need?

Thanks
K.

 

[Marc Soester]

Hi klanglee,

Once you have entered your windows user authentification the browser will
remember it until you close the browser. Yes it is true that when you log out
and then use the "log on with my user account" link, that you will
automatically be logged in again, without any prompt. You can deny the access
to "log out" within Project Server, which may rectify the problem.

Please note that on the loggon screen of Project Server, the username and
password is ONLY for the project server logon ( not for the windows
authentification). Thats why you receive the error message.

If you use Project Server authentification instead of Windows
authentification, you will not have all the functionality that Project Server
offers. Risks, Issues, Document management and workspace only work with
Windows Authentification. I therefore would suggest that you stay with the
windows authentification and deny access to the "log off" functionality,
which you find in the Admin tab. This may solve your problem. Please let me
know if this worked for you, since I am not sure if it will solve your
problen. It is woth trying
Thanks
Marc