# How to install Soffid using Windows native authentication in SQL Server?

## Autenticación NTLM para SQL Server

### Soffid Versions

To install Soffid using Windows native authentication in SQL Server you will need an specific or higher versions of Console and Sync Server:

- Console 3.6.36 or higher
- Sync server 3.6.26 or higher

<p class="callout info">You can check the lastest versions in the download area: [https://download.soffid.com/download/enterprise/](https://download.soffid.com/download/enterprise/)</p>

## Steps 

### Prerequisites

- Install SQL Server and create the soffid database.
- Install Java JDK11.

### Install and config Soffid Console

#### 1.- Install Soffid Console

Open the installation file, Windows Installer Package (.msi). It will create the operating system level service and will start it. After some seconds, the installation wizard will be up and running in port 8080.

If the console was installed previously, you will need to update the system.properties file. You will have to add the parameters **;integratedSecurity\\=true;trustServerCertificate\\=true**

<details id="bkmrk-system-file-you-can-"><summary>system.properties file</summary>

You can find this file in ...\\Soffid\\IAM-Console\\conf

```
#Configured from soffid startup wizard
#Wed Apr 02 11:31:01 CEST 2025
dbMaxConnections=200
hostName=localhost
dbValidationQuery=select 1 from sysobjects
dbDriverString=sqlserver
dbPasswordCipher=com.soffid.iam.tomcat.SoffidPasswordCipher
openejb.validation.output.level=VERBOSE
tomee.serialization.class.blacklist=*
tomee.serialization.class.whitelist=org.apache.openejb
openejb.deploymentId.format={appId}-{ejbClass}
org.apache.johnzon.buffer-strategy=BY_INSTANCE
dbDriverClass=com.microsoft.sqlserver.jdbc.SQLServerDriver
soffid.server.port=8080
dbUser=DOMAIN\\Administrator
dbStatus=1
dbDriverUrl=jdbc\:sqlserver\://141.94.164.195\:1443;databaseName\=soffid02;integratedSecurity\=true;trustServerCertificate\=true
dbPassword=xxxxxx\=\=

```

</details>#### 2.- Configure the Soffid Console service

- Stop the Soffid Console service.
- Update the service to use the domain admin account and password.
- Start the Soffid Console service.

<details id="bkmrk-update-service-prope"><summary>Update Service Logon</summary>

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-04/scaled-1680-/3bOqj73JhU5BtoOw-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-04/3bOqj73JhU5BtoOw-image.png)

</details>#### 3.- Configure the Soffid Console

- Go to [http://localhost:8080 ](http://localhost:8080)
- Click the configure button
- Fill in the parameter to connect: It will be mandatory to add the properties **;integratedSecurity=true;trustServerCertificate=true** to the URL
- Click the connect button

<details id="bkmrk-"><summary>Configure Soffid Console</summary>

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-04/scaled-1680-/pOByrL0CGxHvhI8p-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-04/pOByrL0CGxHvhI8p-image.png)

</details>### Install and config Sync Server

#### 1.- Install Soffid Sync Server

Open the installation file Windows Installer Package (.msi). It will install the software and will execute the installation wizard.

#### 2.- Configure Soffid SyncServer

The installation wizard will ask to configure the Sync Server.

It will be mandatory to add the parameters **;integratedSecurity=true;trustServerCertificate=true** to the connection to database URL

<details id="bkmrk-you-can-find-this-fi"><summary>seycon.properties file</summary>

You can find this file in ...\\Soffid\\IAM-Sync\\conf

```
#Soffid autogenerated file
#Wed Apr 02 11:46:45 CEST 2025
password=xxxxxxxx
hostname=WIN-DESK-01
serverlist=https\://WIN-DESK-01\:1760/
port=1760
sslkey=xxxxxxxxxxxx
user=xxxxx.lab\\Administrator
rol=server
java_opt=-Xmx512m
db=jdbc\:sqlserver\://141.94.164.195\:1443;databaseName\=soffid02;integratedSecurity\=true;trustServerCertificate\=true
url=https\://WIN-DESK-01\:1760/
autoupdate=true

```

</details>#### 3.- Configure the Soffid SyncServer service

- Stop the Soffid Sync Server service.
- Update the service to use the domain admin account and password.
- Start the Soffid Sync Server service.

<details id="bkmrk-update-service-logon"><summary>Update Service Logon</summary>

[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-04/scaled-1680-/Wjg8hS8BkGLfOVDl-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-04/Wjg8hS8BkGLfOVDl-image.png)

</details>####