The solution was to enable this setting in the Management Portal (http://localhost:52773/csp/sys/UtilHome.csp).

Note: When I installed IRIS, I accepted the default settings. It was not obvious the change above was necessary. I was tipped off because the "IRIS Security Error" came from the database, not Windows, so I assumed it must be a setting somewhere.