Identity Provider

I’m working with a Kinetic Cloud Customer on the latest version. When I try to log into DMT, I get this screen (see screenshot below). There are no other environments from the dropdown, and flagging classic style has no effect.

I’ve never seen this and can’t access DMT because of it. The customer is not aware of what this is and is not using Single-Sign On.

Does anyone have any ideas on what this is and how I can get around it?
(Removed Environment information)

image

One work around is to download the SSL client to which defaults to the user and password that you are looking for.

have you tried changing the Authentication mode in the related config.sys?

-->
<appSettings>
<AuthenticationMode value="Basic" options="Windows | AzureAD | IdentityProvider Token | Basic" />
<!-- Enter the URL of your appserver. Format is "net.tcp://serverName/SiteName/ ->

On your User Account, remove whatever is in External Identity field. Not sure if that will break it all together or not. If that does not work, you will have to log into IdP and see if there is a flag that controls your sign in.

this will only change the mapping between epicor and idp user, does not change the login type which is determined before user is known

So, the login type is not tied to the User? When I turned on IdP for my account, everything automatically switched to using IdP :thinking:

Login screen cannot know what settings your user has until you are authenticated.

That external identity field is used for Azure AD - Entra too. Someone else switched it for you.

In smart client it can be done directly in sysconfig, but usually on AppServer level in EAC.
Probably the installation here is only setup to use IDP. But I don’t know whether DMT supports it or not

DMT supports IdP.

So, if I was logged into Kinetic with IdP already when I went to try and open DMT, is that what triggered it to use that?

I login to Epicor using BASIC. This is the first time I’ve opened DMT in this environment.

1 Like

does DMT has sysconfig? what is written inside it?

I’m assuming DMT.exe.config would be it??

Edit: that’s not it

no, it does not look like it, i thought maybe DMT can use config like shown above, for example sysconfig for Epicor.exe contains
<AuthenticationMode value="IdentityProvider" options="Windows|AzureAD|IdentityProvider|Basic" />

It is the standard Client sysconfig file.

And yes, my sysconfig has IdentityProvider, but I did not set that.

I just looked at my Production sysconfig and it is set to Basic. Since I never changed my Pilot one, I’m assuming that there is something in Epicor changing it based on other settings. My assumption is that it is when you enter your IdP email in the External Identity field in User Settings.

oh yes, in the cloud that can be change for you for sure :slight_smile:

If DMT supports sysconfig selection, then it maybe set to basic auth from it.

1 Like