How to Switch from SQL Authentication to Windows Integrated Authentication for the Standalone Orchestrator Database Connections?

News Knowledge Base
,
1

The Standalone Orchestrator currently uses SQL Authentication to connect to its backend database(s). How to configure Orchestrator to use Windows Authentication instead?

NOTE: The steps below assume that the Orchestrator application pool identity--regardless of whether it's a machine account or a custom service account--has the appropriate access to the UiPath SQL databases. Please ensure that this is the case before starting.

Option 1: Machine Account

1. Update all of the Orchestrator SQL connection strings

  • SQL Server connection string syntax

  • Locations

    • UiPath.Orchestrator.dll.config

    • Identity\appsettings.Production.json

    • Webhooks\appsettings.Production.json

  • Review and update the following connection string attributes:

    • Data Source: Name of the target SQL Server (+ instance name if non-default)

    • Initial Catalog: Name of the target SQL database

    • User ID, Password: (will be replaced with Integrated Security=true)

Option 2: Custom Application Pool Identity

1. Update all UiPath application pools (that apply) in IIS to run under the designated service account

  • UiPath Orchestrator

  • Identity

  • Resource Catalog

  • Webhooks

2. Follow the steps in Configuring the Active Directory Integration to accomplish the following

  • Registering the service principal name (SPN)

  • Configuring IIS authentication settings

3. Ensure that the certificate(s) for Orchestrator and Identity Server are valid and that the service account has access to the private key(s)

4. Update all of the SQL connection strings

  • SQL Server connection string syntax

  • Locations

    • UiPath.Orchestrator.dll.config

    • Identity\appsettings.Production.json

    • Webhooks\appsettings.Production.json

  • Review and update the following connection string attributes:

    • Data Source: Name of the target SQL Server (+ instance name if non-default)

    • Initial Catalog: Name of the target SQL database

    • User ID, Password: (will be replaced with Integrated Security=true)