Registration Options
Web Management supports three ways for a user to log in. These methods are not mutually exclusive: A system can maintain local users and also use an external method. In all three cases, the "" user role () determines who is permitted to view and modify what.
Users from the two external methods are managed by the user administration as external users; that page also explains how to create them in advance.
Email Address and Password
Users log in with their email address and a personal password.
You create these users in the user management section at ; a password is required for them. You cannot create the first local user there yet—without it, the login form is locked. It is created when the management system is launched; see first login and initial user .
Windows Authentication
For integration into existing Windows environments, the OPC Router supports login with Windows user accounts via Windows Negotiate/NTLM in Windows deployments. This is primarily intended for local access to the Web Management interface from the system on which the OPC Router is installed. Members of the local group OPC-Router-5-Administrators are assigned the role _Admin_.
This option is not available for Docker and Linux deployments.
In many environments, Windows login is only possible if HTTPS is configured, and the certificate must contain the name used to access the system via a web browser. Group policies may also impose additional restrictions. For information on the required settings, see Additional settings for logging in as a Windows user .
Microsoft Entra ID
For organizations that use cloud-based identity services, the OPC Router offers sign-in via Microsoft Entra ID—formerly Azure Active Directory. This requires prior configuration and enables centralized management of user identities and access rights within the cloud infrastructure.
For instructions on how to establish a connection between Entra ID and the OPC Router, see Integrating Microsoft Entra ID/Azure AD; for information on how to create and assign the OPC Router’s roles as app roles there, see User Roles via Entra ID.
By default, Microsoft Entra ID automatically creates or updates external users upon their first successful login. You can disable this behavior by setting AZURE_AD_DISABLE_AUTO_PROVISION=true. In this case, only existing external users can log in.
Session Duration
Regardless of the login method, the system can automatically log users out after a period of inactivity or after a maximum session duration. Both time limits are disabled by default and are set globally via environment variables as well as individually for each user—see Automatic Logout .