Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Indeed

...

AM Admin Console

...

 is a Web application based on IIS. This module performs system administration. It also handles all the settings of the system and of the users.

...


Info

Files

...

of Admin Console reside in: indeed AM\Indeed

...

AM Admin Console\<Version number>\

  • Indeed.

...

  • AdminConsole-x64.

...

  • msi is the installation package of

...

  • Admin Console.

...

Additional AdminConsole installation files reside in: indeed AM\

  • Misc\Server2008\Indeed.

...

  • AdminConsole.IIS.Install.MSServer2008.ps1 is the script file to install the required components of IIS server for Windows Server 2008.
  • Misc\Server2008\NDP452-KB2901907-x86-x64-AllOS-ENU.exe is the Microsoft .NET Framework 4.5.2  update package for Windows Server 2008. 
  • Misc\Server2012\AccessControlInitialConfig\Indeed.

...

  • AdminConsole.IIS.Install.MSServer2012.ps1 is the script to install the required IIS server components for Windows Server 2012.

Installation

  1. Install

...

  1. the Admin Console by running Indeed.

...

  1. AdminConsole-x64.

...

  1. msi installer.
  2. Add HTTPS binding in Default Web Site settings of IIS Manager.

...

  1. Info

    Indeed AM Admin Console is a web application on the basis of IIS.

...

  1. Require SSLis a default installation setting, which, in turn, requires active HTTPS binding.

    If you do not plan to use https protocol, then deactivate SSL requirement in IIS settings for

...

  1. Admin Console


    1. Run IIS Manager and expand the Sites item.
    2. Select the Default Web Site site and click Bindings item in the Actions section.
    3. Click Add:
      1. Type - https.
      2. Port - 443.

...

      1. Select the SSL Certificate.
    1. Save the binding.
  1. Configure Kerberos delegation.Image Added

...

  1. Add Admin Console application to local Internet. Image Added

Modifying a configuration file

...

  1. Open the console configuration file named Web.config (C:

...

  1. \inetpub\wwwroot\iidemc\Web.config).
  1. Specify the URL to connect to Indeed server for Url parameter in amAuthServer tag.
  2. Url parameter is url address of Indeed server in the following format: http(s):// full_dns_name_of_server/easerver/   Information: To ignore server certificate errors, change the "isIgnoreCertErrors" parameter to "true" in "applicationSettings. config" file ( iidemc\Config ).
  3. Specify the url to connect to log server. To do so, edit the logServer tag.
  4. URL is url to connect to log server in the following format http(s)://full_dns_name_of_server/ils/api. 

Note: If several servers are used, then you have to specify the load balancer address

  1. CertificateThumbprint - this is to be defined if the private key is stored in the registry, and the certificate is in the PC storage.
  2. CertificateFilePath -this is to be defined, if the key pair is stored in pfx.
  3. CertificateFilePassword is the password for pfx.
  4. Restart IIS server after modification of configuration files. EMC is available at the following address: “http(s)://full_dns_name_of_server/iidemc/"

Configuring of logging in to EMC using SAML idp (Information: this setting is optional).

  1. Open the console configuration file named Web.config (C:

\inetpub\wwwroot\iidemc\Web.config).

  1. Specify the URL to connect to Indeed SAML server for Url parameter in amAuthentication tag.
  2. loginUrl parameter is URL address of the server with Indeed SAML idp component installed in the following format: http(s)://full_dns_name_of_server/iidsamlidp/
  3. In code:

Change the value of mode parameter to Forms

  1. Save changes in configuration file. Information: To disable domain login and password prompt, activate “Anonymous authentication” and deactivate “Windows authentication” for iidsamlidp, at the SAML server.

Configuring of logging out of EMC using SAML idp

  1. Open the console configuration file named Web.config (C:

\inetpub\wwwroot\iidemc\Web.config).

  1. For amAuthentication tag, add enableLogout parameter set to true (false by default).
  2. Open the SAML configuration file named Web.config (C:

\inetpub\wwwroot\iidsamlidp\Web.config).

  1. Specify the EMC server URL address for EmcServiceUrl parameter of  amPartnerServiceProviderSettings tag.
  2. To log out of EMC, proceed as follows:
  3. Click the user name in the upper part of the window.

b. Select  "Log out” item from the drop-down list that appears. Information: You log out of  SAML idp automatically when logging out of EMC.