AVEVA™ PI System™ Feedback Portal

Welcome to our feedback site!


We created this site to hear your enhancement ideas, suggestions and feedback about AVEVA products and services. All of the feedback you share here is monitored and reviewed by the AVEVA product managers.

To start, take a look at the ideas in the list below and VOTE for your favorite ideas submitted by other users. POST your own idea if it hasn’t been suggested yet. Include COMMENTS and share relevant business case details that will help our product team get more information on the suggestion. Please note that your ideas and comments are visible to all other users.


This page is for feedback specifically for AVEVA PI System. For links to our other feedback portals, please see the tab RESOURCES below.

Add a new idea Subscribe
Status No status
Product AVEVA™ PI System Access (PSA)
Categories PI Web API
Created by Nathan Skitt
Created on May 15, 2026

RELATED IDEAS

Recognize Federated Entra ID Bearer Token for AIM Authentication in Machine to Machine operations

We want to have a custom application authenticate to the PI Web API. The AIM server is using a federated Entra ID. When sending the bearer token from Entra ID the PI Web API gives an Event Viewer error - Error using access token Unable to validate token. Error: IDX10205: Issuer validation failed. Issuer: <ENTRA ID URL>. Did not match: validationParameters.ValidIssuer: <AIM URL> or validationParameters.ValidIssuers: 'null' or validationParameters.ConfigurationManager.CurrentConfiguration.Issuer: 'Null'.
This would be an enhancement in order to comply with the documentation statement of: "Token conversion allows an external token from an identity provider that AIM is federating identity to, for example, CONNECT, to be converted to an AIM token that on-premise services will trust and understand." - a PI Web API implementation of this behavior. (https://docs.aveva.com/bundle/identity-manager/page/1282690.html)
The purpose is to prevent additional internet exposure for the AIM server while Entra ID is already exposed. Providing increased security and decreasing the complication of configuration.

Alternate summary:
Use a Bearer Token issued from Entra ID to authenticate to PI Web API - where Entra ID is Federated to the AIM server

  • Attach files