...
Accounting Service is installed as part of SSO installation / upgrade. You can find instructions on how to install and upgrade Ubisecure SSO in Installation - SSO and Upgrade - SSO, respectively. Read and proceed with those instructions first.
...
- Configuration of the Accounting Service integration in the SSO directory entry:
CN=Ubisecure Accounting
underCN=Services, OU=System
Accounting
site and application in SSO directory- Accounting Service, which is a standalone Spring Boot application running as a service in your operating system (
ubisecure-accounting
), see Verify the running service below
Finalise access rights
After the installation you will have a Accounting
application in SSO that you can verify and manage with Management user interface - SSO. This application controls access to the Accounting Service endpoints like reporting, see Using Accounting Service.
Figure 1. Accounting application in SSO Management |
...
Note |
---|
We suggest to reconfigure the allowed users for the Accounting application in the group named Accounting Users according to your needs, see SSO Management UI Groups. |
Anchor | ||||
---|---|---|---|---|
|
In order to verify that Accounting Service has been successfully installed or upgraded and started follow the guidelines in the subsequent sections. See Troubleshooting Accounting Service if any of the steps fail.
Accounting Service log
Verify from the application log (by default accounting/logs/ids-accounting.log
under ubilogin-sso
installation directory) that the service has started without errors.
...
- Accounting Service needs to be running
- Need to know the HTTP Basic authentication credentials, see Accounting Service management - SSO / Actuator endpoint authentication
...
Verify the functionality
See also Using Accounting Service.
Accounting Service OAuth2 authentication check
...
- Open browser and navigate to the following URL:
(the actual URL depends on your network configuration, see Network requirements)
/reporthttps://accounting.example.com
/accounting Enter the credentials in SSO
A CSV download file with total of 0 users is downloaded (when this check is done before the first scheduled monthly calculation)
Code Block language text title Monthly active unique user counts empty CSV example Month,Authentication Method,User Count 2019-03,TOTAL,0
Verify the audit log events about the access has been written, see Accounting Service logging / Audit log
If you don't perceive the expected outcome see Troubleshooting Accounting Service.
...
- Authenticate into some other SSO managed application than
Accounting
and preferably with some other user or other authentication method than password - Open browser and navigate to the following kind of URL:
where
/accounting/verify/events/<yyyy-MM-dd>https://accounting.example.com
<yyyy-MM-dd>
is replaced with the current date, see Using Accounting Service Enter the credentials in SSO
A CSV download file with an event for each authentication on that day is downloaded, the last row shows the last event
Code Block language text title Daily successful authentication events CSV example Timestamp,Authentication Method,Pseudonymised User ID 2019-03-15T09:09:00Z,PASSWORD,3b4e5ba2d62e69b6de6730d407f94c999b01c17e10b0d110ed98dfffcbd92191
If you don't perceive the expected outcome see Troubleshooting Accounting Service.