This section explains the system requirements and prerequisites to install standalone Identity Console.
Category |
Minimum Requirement |
---|---|
Processor |
1.4 GHz 64-bit |
Memory |
2GB |
Disk Space |
200 MB on Linux |
Supported Browser |
NOTE:While using Identity Console in Mozilla Firefox, the operation might fail with Origin Mismatch error message. To troubleshoot, perform the following steps:
|
Supported Operating System |
|
Certificates |
|
Once you are ready, proceed with installing Identity Console. For more information, see Deploying Standalone Identity Console (Non-Docker).
Using the One SSO Provider (OSP), you can enable the single sign-on authentication for your users to the Identity Console portal. You must install OSP before installing Identity Console. To configure OSP for Identity Console, follow the on-screen prompts and provide the required values for configuration parameters. To register Identity Console to an existing OSP server, you must manually add the following to the ism-configuration.properties file in /opt/netiq/idm/apps/tomcat/conf/ folder:
com.netiq.edirapi.clientID = identityconsole com.netiq.edirapi.redirect.url = https://<Identity Console Server IP>:<Identity Console Listener Port>/eDirAPI/v1/<eDirectory Tree Name>/authcoderedirect com.netiq.edirapi.logout.url = https://<Identity Console Server IP>:<Identity Console Listener Port>/eDirAPI/v1/<eDirectory Tree Name>/logoutredirect com.netiq.edirapi.logout.return-param-name = logoutURL com.netiq.edirapi.response-types = code,token com.netiq.edirapi.clientPass._attr_obscurity = NONE com.netiq.edirapi.clientPass = novell
NOTE:
If you are installing OSP for the first time, specify the option 'y' for Configure OSP with eDir API and follow the on-screen prompts to register Identity Console with OSP.
Ensure to specify the eDirectory tree name in lowercase while configuring Identity Console. In case, the tree name is not specified in lowercase, the login to the Identity Console server might fail.
With OSP, you can connect to only a single eDirectory tree as OSP does not support multiple eDirectory trees.