Which account is used to access the data source when Integrated Authentication is used in the Information Designer data source

Which account is used to access the data source when Integrated Authentication is used in the Information Designer data source

While creating a data source through the Information Designer in TIBCO Spotfire Analyst Client, if the "integratedSecurity" parameter is set to "true", that is, the data source connection URL is in the following format, then the account used to access the data source depends on which authentication mechanism is set on the TIBCO Spotfire Server:

jdbc:sqlserver://dbsrv.example.com:1433;DatabaseName=spotfire_server;selectMethod=cursor;integratedSecurity=true;

Basic Database/LDAP Authentication

If TIBCO Spotfire Server is set for Basic Database/LDAP Authentication, the user account running the TIBCO Spotfire Server service will be used to access the data source.
 

NTLM Authentication

If Spotfire server is set for NTLM Authentication, the user account running the TIBCO Spotfire Server service will be used to access the data source.
 

Kerberos Authentication

If the TIBCO Spotfire Server is set for Kerberos Authentication, the following configurations must be considered:

1. If the TIBCO Spotfire Server authentication is set for constrained delegation, the data source needs to be set for constrained delegation as well. In this case, the credentials of the user currently logged in to Spotfire will be used to access the data source.
2. If the TIBCO Spotfire Server authentication is set for unconstrained delegation, the data source needs to be set for unconstrained delegation as well. In this case, the credentials of the user currently logged in to Spotfire will be used to access the data source.
3. If the TIBCO Spotfire Server authentication does not have delegation enabled, the data source can be set for unconstrained/constrained/no delegation. In this case, the service account running the TIBCO Spotfire Server service will be used to access the data source.

Note: In all of the above cases, a dummy username and password must be mentioned while creating the data source in the Information Designer as below, since these fields can not be left blank. These credentials however, will not be used at all and the credentials will be used as mentioned in the above cases:

Doc: Data Source Tab

• https://docs.tibco.com/pub/sfire-analyst/10.3.2/doc/html/en-US/TIB_sfire-analyst_UsersGuide/id/id_data_source_tab.htm

Doc: Creating a Data Source in Information Designer

• https://docs.tibco.com/pub/sfire-analyst/10.3.2/doc/html/en-US/TIB_sfire-analyst_UsersGuide/id/id_creating_a_data_source.htm