# Windows authentication

The *Flow User Id* needs to be the same as in the *Active Directory* to be able to use *Windows Authentication*. Use the [Active directory sync](https://help.novacuraflow.com/development/flow-studio/environment/active-directory-sync) in the *Environment* part of the *Flow Studio* to easily import users from the *Active Directory*.

**1.** Enable *Windows Authentication*

* Click on the Web.Authenticator application under the site
* Double click on *Authentication*
* Enable *Windows Authentication* and disable all other authentications\
   If *Windows Authentication* is missing in the list of authentications; go to the *Server Manager* and click on *Add roles and features*. Click on *Next* until the *Server roles* tab, extract *Web Server (IIS)*, *Web Server*, *Security,* and check *Windows Authentication*, click on *Next* until installation.

![](https://529897662-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LtPTgZOYmpJka4jqs1v%2F-M-oWQz96KWE12qHpVRd%2F-M-oWX8PJzRd7w8UUvRg%2Fhelp_root_installation_win_auth.png?alt=media\&token=245d36e9-0979-429c-b414-70ef1885559e)

<div align="left"><img src="https://529897662-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LtPTgZOYmpJka4jqs1v%2F-M-oWQz96KWE12qHpVRd%2F-M-oWagU6yG1iyouvuqE%2Fhelp_root_installation_web_auth_winauth.png?alt=media&#x26;token=6a23a489-9805-43b9-b683-a66d3694dcb7" alt=""></div>

**2.** Control the configuration of the *Web Authenticator*

* Open the folder for the *Web Authenticator* (C:\Novacura\Novacura Flow 6\WebAuth)
* Right-click and edit the Web.config file
* Change the value for key **flowServerAddress** to the full *Flow Server* address, for example:\
  &#x20;\<add key="flowServerAddress" value="[http://servername:80/Novacura.Flow.6.Server/">](http://servername:80/Novacura.Flow.6.Server/">)
* Open the folder for the *Web Client and/or portal*
* Right click and edit the Web.config file
* Change the value for key **flowWebAuthenticator** to the *Flow Web Authenticator* address, for example:\
  &#x20;\<add key="flowWebAuthenticator" value="[http://servername:80/Novacura.Flow.Client.Web.Authenticator">](http://servername:80/Novacura.Flow.Client.Web.Authenticator">)
* Save the changes and close the files

**3.** The installation of the *Windows Authentication* for the *Flow Web Client / Portal* is now done. The users can log on with *Windows Authentication* in the *Flow Web Client / Portal* if they click on *Sign in with your Microsoft Windows domain account*.&#x20;

![](https://529897662-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LtPTgZOYmpJka4jqs1v%2F-M1ZXMfKN-3ZNOoW7aPC%2F-M1ZXqhphpaTAtC8KFNv%2Fbild.png?alt=media\&token=8da3f8fb-b6c3-4ec1-ae94-99c54d077d2a)