Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space IDS and version 8.7

...

Since SSO version 8.4 with Accounting Service feature access to PostgreSQL database is required for the service to run. If you have already installed Ubisecure CustomerID you can use the existing PostgreSQL installation but you need to create a specific database for this purpose. The necessary tables are automatically created during the initial startup of the Accounting Service.

See PostgreSQL preparation on Windows for more information and steps to accomplish.

...

Before continuing with the installation which will start the Accounting Service you need to enter and save the secret key contents in the location referred by accounting.secret-key-location in win32.config. See Accounting Service security about the usage of the key for pseudonymisation. The page contains a suggested script to create a secure enough secret in the default location.

You may also customise other Accounting Service configuration settings for your needs, which is recommended. See Accounting Service additional configuration about the properties to set.

...

  1. Creates a self-signed SSL certificate for test purposes with the configured host name as the subject DN a.k.a owner.
  2. Installs the applications in ubilogin/webapps for Ubisecure SSO Tomcat.
  3. Installs Ubisecure SSO as a service.
  4. Copies the Accounting Service configuration settings to /accounting/config directory.
  5. Installs Accounting Service as a service.
  6. Creates and configures a site named Accounting under System site with an OAuth 2.0 application named Accounting. This application is needed for the secured endpoints to access Accounting Service data. The application is allowed to a group named Accounting Users. The System Administrator user is by default added to this group but you can configure the users otherwise once Ubisecure SSO is running, see SSO Management UI Groups.
  7. Starts Accounting Service
    1. On the first time the necessary database tables are created in your database.
    2. If you are doing the initial Accounting Service installation and the service does not start you may need to change the Accounting Service related settings in the win32.config file before continuing. see Change configuration settings during installation process in Windows. See also Troubleshooting Accounting Service.
  8. Starts Ubisecure SSO


Note

Accounting Service should always be running before SSO is started or otherwise SSO log will be filled with errors but still keeps running if there is enough disk space. SSO can recover without a restart from Accounting Service restart if necessary.


Continue on the page Installation finalisation to verify that the installation was successful.