We have authentication set up through our own single-sign-on system so that when a user logs in to our portal, they are automatically logged in to InfoView. To do this, we use Enterprise athentication with Trusted Authentication enabled. We set up the users in BOE with the same user ID that they'll use to log in to the portal and a random password (none of the non-administrator users know their specific BOE password.) Using trusted authentication, our portal issues the calls to log them in to InfoView based on the user ID - no password required. This takes care of the authentication piece.
However, for the authorization piece of security, if you're going to use the InfoView application, you MUST have the users and their assignment to user groups set up in the CMC. Having all of this configures in the CMS database is how BO XI knows how to limit what users have access to. BOE WILL NOT read this kind of information from another database.
-Dell
A computer only does what you actually told it to do - not what you thought you told it to do.