In order to facilitate larger users, this feature allows Cyrious Control users to use domain user credentials to identify the employee rather than a separate user name and password.

For domain login to work, SSLIP.exe must be running as a domain user. You can check to see which user you are logged into by opening a command line and typing “whoami” without the quotes then hit enter.

For domain login to work, it may be necessary to run the Chapi service as a domain user. The best way to check this is in the Services snap-in.

1. Go to Control Panel > Administrative Tools > Services
2. Find Chapi.ServiceHost_12556 in your list of services
3. See what user is running the service in the Log On As column

If you are migrating to a new domain, you will need to add your Windows CHAPI user to that new domain as well. Open services.msc in Windows and double click on your CHAPI Service (pictured above). Select the Log On tab and enter the credentials for your new domain account here.

When Control starts up and locates the SSLIP, the SSLIP will notify Control if either of these startup options are set:

• “Allow users to log in using domain credentials” (EnableDomainLogins)
• “Automatically try to login using domain credentials (DomainAutoLogin)

The full list of Startup options and their default values are located here :

http://control.cyriouswiki.com/Startup+Options

If the startup option to “Automatically try to login” is enabled, the normal login screen will be skipped. Instead of the normal login screen the user will see this screen:

Control will then send the domain and user name to the SSLIP instead of the normal login credentials. The SSLIP will then validate whether the user is or is not authorized to log in and return the database credentials to Control, just as it currently does with the entered login information.

While that is going on, the “Verifying Authorization” progress indicator will slowly cycle from 0% to 100% over the course of a few seconds. It will wait until the full bar is complete even if that means the entire system is just waiting idle. This will allow the user enough time to cancel the automatic login.

If the “Cancel Login” button is not clicked in the desired window, the “Attempting to log in” screen is closed and the login continues with the normal display.

If the “Cancel Login” button is clicked, or if the “Automatic login” startup option is not set, the normal login screen is shown. If the option to “Allow users to login with domain credentials” is specified, the login screen is modified to include the domain option.

The domain and user name can be set up in the employee user setup page where the users login name is defined.

User Setup page now displays the domain user name (if applicable). If not applicable or no value is set, this screen will not display “Associated Domain User” of the field for the domain name.

User name and password dialog appears as follows when the domain login is enabled:

Note: Associated Domain user is only editable for Administrators. Regular users can still reset their password though.

See Also