Using the Active Directory to manage users

It is possible to use Active Directory accounts to work with ABBYY FlexiCapture. To enable the use of Active Directory accounts, you need to import them from the Active Directory and set up their roles and access rights. To import users from the Active Directory, the FlexiCapture administrator should open the Administration and Monitoring Console and on the Settings → Users page, click the Import button. Either individual accounts or groups can be imported (select the Search groups option to find groups). In the Active Directory path field, specify the address of the domain controller where ABBYY FlexiCapture is installed.

By default, users and groups are imported and synced in one Active Directory domain. If a group being imported contains users from another subdomain, make sure to specify the address of the domain’s controller in the following format: GC://<address>.

Use the Name field in the Search and import settings section to find a particular user or group by their name.

You can replace a portion of the name with an asterisk.

Users added in this manner can authenticate using the standard IIS authentication methods, specifying their Windows account names. Additionally:

When accessing FlexiCapture stations, users must select Windows authentication.
When accessing web stations, users must specify station addresses in the following format: https://<ApplicationServer>/FlexiCapture12/<Station>/WinAuth, where <ApplicationServer> is the name of the computer on which the Application Server is installed and <Station> is the web station that the user wants to access.

Using FlexiCapture authentication

If you need to use FlexiCapture authentication for a user imported from the Active Directory, the administrators and the user must complete these steps:

The administrator must click the user’s login and on the page where roles and permissions are specified, click the RESET PASSWORD button, and specify “password” as a temporary password for the user.
Note: If the RESET PASSWORD button is not available on the roles and permissions page, this means that the user has already been issued with a temporary password.
The user must now log in to ABBYY FlexiCapture and change their password.
When accessing a ABBYY FlexiCapture station, the user must select server authentication. When accessing a web station, the user must specify the address of the station in the following format: https://<ApplicationServer>/FlexiCapture12/<Station>, where <ApplicationServer> is the name of the computer on which the Application Server is installed and <Station> is the web station that the user wants to access.

Using the Active Directory to manage ABBYY FlexiCapture groups

You can synchronize the groups in ABBYY FlexiCapture with the groups in the Active Directory by clicking the Synchronize all groups button. In this manner, you can manage ABBYY FlexiCapture groups via the Active Directory.

Synchronizing groups and user accounts using a POST request

You can synchronize groups of FlexiCapture accounts with Active Directory without using the interface. For example, this approach can be applied if you need to perform synchronization automatically on schedule.To do this, send the following request:

https://urlToMonitoring/winauth/ActiveDirectory/SynchronizeGroups

Be sure to specify required parameters:

Server – Active Directory domain name
Iswindowsauthentication – Windows authentication on a Active Directory server
UserName – user name to connect to Active Directory
Note: This parameter is not applied if IsWindowsAuthentication=true
Password – user password
Note: This parameter is not applied if IsWindowsAuthentication=true
SearchGroups – group search
SearchGroupsUsers – allows to search for users in groups
SearchSubGroups – allows to search for subgroups in groups
Query – search bar to search for groups and users in Active Directory

​Using the Active Directory to manage ABBYY FlexiCapture groups

Using the Active Directory to manage ABBYY FlexiCapture groups