Configuring security

By default, the Meridian Explorer web application is configured with the Integrated Windows authentication option enabled. This allows you to use Windows user accounts and groups to configure the security of the application. The Meridian Explorer clients will connect to the repository using the security account of the Internet Information Services (IIS) application pool. By default, Meridian Explorer will use the DefaultAppPool application pool, which runs under the Network Service account.

If SQL Server authentication is selected for the repository database connection, a dedicated application pool may not be necessary.

If Windows authentication is selected for the repository database connection, we recommend that you create a dedicated application pool that will run under a domain account with the following rights:

• Read and Write access to the BlueCielo Application Manager configuration database and the repository database.
• Read access to the vault stream folders unless the Location for document content option is set to Import content into the repository as described in Configuring repository synchronization.

To configure the application pool account:

1. Open the Internet Information Services Manager in Computer Management and select Application Pools in the left pane.
2. On the Actions menu, click Add Application Pool. The Add Application Pool dialog box appears.
3. Click options or type values using the descriptions in the following table.

4. Click OK. The new application pool is added to the Application Pools list.
5. Select the new application pool, and on the Actions menu, select Advanced Settings. The application pool’s Advanced Settings dialog box appears.
6. Expand Process Model and select Identity.
7. Click the browser button in the value column. The Application Pool Identity dialog box appears.
8. Select Custom account and click Set. The Set Credentials dialog box appears.
9. Type an account name in User name and type the account password in Password and Confirm Password.
10. Click OK. The dialog closes and the account name appears in Custom account.
11. Click OK. The dialog closes and the account name appears in Identity.
12. Click OK. The dialog closes.
13. Expand Sites in the left pane, expand Default website, and select ExplorerClient.
14. On the Actions menu, select Basic Settings. The site’s Edit Application dialog box appears.
15. Next to Application pool, click Select. The Select Application Pool dialog box appears.
16. From the Application pool list, select the name that you typed in step 3.
17. Click OK. The dialog closes.
18. Click OK. The dialog closes.

After changing the security account, contact your database administrator to grant the account access to the Meridian Explorer configuration and repository databases.