Subordinate Application Tags

Not counted towards your tag license limit.

Provides monitoring and access to all tags in a selected subordinate application. The application holding the Subordinate Application tag is referred to as a Master application.

All the tags in the selected subordinate application will be visible as children of the Subordinate Application tag, so long as all user-defined types defined in the subordinate application are also defined in the master application. If the master application and subordinate application are not built on the same layer where that custom type is defined, then you must copy the definition from the subordinate application to the master application.

 

A master application can have several subordinate application tags, but each must link to a separate application. If two link to the same application, only one will function at a time.

You must have a security account with the Manager privilege in the subordinate application before you can configure a subordinate application tag to link to that application. You will be prompted for a username and password.

Security Management for Subordinate Applications

It may be convenient for a user to have a single sign-in account that can be used across applications. The only practical way to bundle security access to multiple applications within a single account is to use Windows Security Integration with all the relevant applications.

Active Directory accounts are independent of your applications. They gain access to your applications through AD Security Groups, which map to roles within the applications for which you have enabled Windows Security Integration (WSI). By associating a Windows AD account with the AD Security Groups for several applications, you achieve your goal of creating a single account with access to multiple applications.

For example, consider three applications, A, B and C. They all have a common role Operator and each has a unique role, Role-A, Role-B and Role-C respectively. Assume that all three apps use a common ADGroupPrefix of "VTScada". The AD account will be a member of four AD Groups; VTScada-Operator, VTScada-Role-A, VTScada-Role-B and VTScada-Role-C. The AD account, when used in each app will be assigned two roles, the common Operator and the appropriate Role-X.

You may wish to differentiate the Operator role between the three applications. Do so either by setting a different ADGroupPrefix for each application (the preferred solution) or by creating unique names for roles within each application.

For more information, refer to the Windows Security Integration topics, starting with Running Multiple Applications with WSI.

Do not use the "Shared Security" feature of the Administrative dialog. Windows Security Integration is a better solution. If you attempt to select a subordinate application that uses shared security, a warning message will be displayed.

Note to advanced developers: If writing an expression that involves a subordinate application, the value of a SubordinateApplication tag is TRUE when the subordinate application is running and synchronized with the master application, and FALSE when it is not.

Subordinate Application tags are excluded from tag exports.

Subordinate Application tag properties: Settings Tab

The Settings tab holds a drop-down list, from which you can select the subordinate application.

Authentication to an account possessing the Manager privilege is required if the subordinate application is secured. Trihedral strongly recommends that all applications be secured.

Immediately upon selecting the subordinate application, you will be prompted to authenticate with that application.

Enter the user name and password for an account in the subordinate application that possesses the Manager privilege.