Jump to: navigation, search

Difference between revisions of "HowTo:Configure LAS Authentication"


(See also)
 
(12 intermediate revisions by the same user not shown)
Line 1: Line 1:
A [[USAM#LAS_(Local_Application_Service)|Local Application Service (LAS)]] can be configured in the following way:
+
Using the [[USAM#LAS_(Local_Application_Service)|Local Application Service (LAS)]] authentication mode requires to configue the {{UBIK Studio}} as well as the [[Web_Service|web service]].
 
<ol>
 
<ol>
<li>Open {{UBIKSTUDIO}} and connect to the database which should be configured for LAS.</li>
+
<li>Open {{UBIK Studio}} and connect to the database which should be configured for LAS.</li>
 
<li>Open [[UBIK_Studio_Basics#Database_specific_settings|database specific settings]] and set</li>
 
<li>Open [[UBIK_Studio_Basics#Database_specific_settings|database specific settings]] and set</li>
 
{| class="wikitable" | width = "50%"
 
{| class="wikitable" | width = "50%"
Line 9: Line 9:
 
| ''SessionManagementType''|| '''1''' || 0 = Local Management, 1 = LAS, 2 = GAS
 
| ''SessionManagementType''|| '''1''' || 0 = Local Management, 1 = LAS, 2 = GAS
 
|-
 
|-
| ''SessionServiceUrl''|| https://SERVERNAME/UBIK/USAM.svc/SOAP?? || Address of the authentication service
+
| ''SessionServiceUrl''|| <nowiki>https://SERVERNAME[:PORT]/UBIK/USAM.svc/SOAP??</nowiki> || Address of the authentication service<br />The port number ''PORT'' must be specified only if other than 443 (default for https).
 
|-
 
|-
 
| ''TokenValityPeriode''|| '''300''' || Duration (in seconds) every generated token is valid. The token expires after this timespan.
 
| ''TokenValityPeriode''|| '''300''' || Duration (in seconds) every generated token is valid. The token expires after this timespan.
Line 17: Line 17:
 
</ol>
 
</ol>
 
<ol start="3">
 
<ol start="3">
<li>Open the [[UBIK Web Service Configuration|web.config]] of the data service and set the session's management type and URL to the according address of the web service.</li>
+
<li>Open the [[Web Service Configuration|web.config]] of the data service and set the session's management type and URL to the according address of the web service.</li>
 
<source lang="xml">
 
<source lang="xml">
 
   <appSettings>
 
   <appSettings>
Line 23: Line 23:
 
     <add key="UBIK.Service.TokenValityPeriode" value="600" />
 
     <add key="UBIK.Service.TokenValityPeriode" value="600" />
 
     <add key="UBIK.Service.SessionManagementType" value="1" />
 
     <add key="UBIK.Service.SessionManagementType" value="1" />
     <add key="UBIK.Service.SessionManagementUrl" value="https://SERVERNAME/UBIK/USAM.svc/SOAP" />
+
     <add key="UBIK.Service.SessionManagementUrl" value="https://SERVERNAME[:PORT]/UBIK/USAM.svc/SOAP" />
 
     <add key="UBIK.Service.HideAuthenticationInfo" value="0" />
 
     <add key="UBIK.Service.HideAuthenticationInfo" value="0" />
 
     ...
 
     ...
 
   </appSettings>
 
   </appSettings>
 
</source>
 
</source>
<li> If the authentication service is in a different location, open the [[UBIK Web Service Configuration|web.config]] of the USAM service:<br/>
+
<li> If the authentication service is in a different location, open the [[Web Service Configuration|web.config]] of the USAM service:<br/>
 
* the settings in the configuration file are the same as in the data service
 
* the settings in the configuration file are the same as in the data service
 
* however, the settings for the SessionManagementType and the SessionManagementUrl will be ignored
 
* however, the settings for the SessionManagementType and the SessionManagementUrl will be ignored
 
</li>
 
</li>
 
</ol>
 
</ol>
 +
 
{{Attention|It is important that the authentication service connects to the same database as the data service!}}
 
{{Attention|It is important that the authentication service connects to the same database as the data service!}}
  
Line 40: Line 41:
 
* [[USAM#GAS_.28Global_Application_Service.29|Global Application Service]]
 
* [[USAM#GAS_.28Global_Application_Service.29|Global Application Service]]
  
[[Category:How-To]]
+
[[Category:How-To|Configure LAS Authentication]]
 +
[[Category:Installing|Configure LAS Authentication]]
 +
[[Category:Session management|Configure LAS Authentication]]

Latest revision as of 12:19, 22 July 2015

Using the Local Application Service (LAS) authentication mode requires to configue the UBIK® Studio as well as the web service.

  1. Open UBIK® Studio and connect to the database which should be configured for LAS.
  2. Open database specific settings and set
  3. Parameter Value Comment
    SessionManagementType 1 0 = Local Management, 1 = LAS, 2 = GAS
    SessionServiceUrl https://SERVERNAME[:PORT]/UBIK/USAM.svc/SOAP?? Address of the authentication service
    The port number PORT must be specified only if other than 443 (default for https).
    TokenValityPeriode 300 Duration (in seconds) every generated token is valid. The token expires after this timespan.
    HideAuthenticationInfo 1 This switch provides the possibility to turn off the detailed error information as necessary (due to security issues).
  1. Open the web.config of the data service and set the session's management type and URL to the according address of the web service.
  2.   <appSettings>
        ...
        <add key="UBIK.Service.TokenValityPeriode" value="600" />
        <add key="UBIK.Service.SessionManagementType" value="1" />
        <add key="UBIK.Service.SessionManagementUrl" value="https://SERVERNAME[:PORT]/UBIK/USAM.svc/SOAP" />
        <add key="UBIK.Service.HideAuthenticationInfo" value="0" />
        ...
      </appSettings>
  3. If the authentication service is in a different location, open the web.config of the USAM service:
    • the settings in the configuration file are the same as in the data service
    • however, the settings for the SessionManagementType and the SessionManagementUrl will be ignored
IC Attention.pngIt is important that the authentication service connects to the same database as the data service!

See also