Authentication for Bot Runners
Two layers of authentication are present for deploying the bots on remote Bot Runners.
The Bot Runner is logged on/connected/unlocked using the configured credentials. These credentials are fetched from the centralized Credential Vault over HTTPS. This first level of authentication is done against the Active Directory domain automatically, on behalf of the user and is called Bot Runner autologin.
After being authenticated, Bot Runners can be authorized to execute bots independently and asynchronously.
|User session status before bot deployment||During deployment||User session after bot execution finishes|
|No session exists||Create a new session and deploy the bot||Log off|
|Unlocked||Deploy the bot||Session remains unlocked|
|Locked||Unlock the session and deploy the bot||Session is relocked|
|Disconnected||Unlock the session and deploy the bot||Log off|