Java and JAVA_HOME- Java must be preinstalled on the server (including Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files).
- Review the System Recommendations and Supported Platforms page to get information about which Java versions we currently support. Download one of the supported versions and follow their installation documentation.
- If you want to use a newer Java version check with our support if we have already tested Ubisecure SSO with it.
Set up a system wide JAVA_HOME environment variable - In Linux, this can be done by modifying the /etc/environment file
Network requirementsFor production installations you must have a load balancer or proxy in front of Ubisecure SSO with the following suggested configuration. Component | Publicly facing URL (default port 443) | Paths | Internal root URL* | Example |
---|
Ubisecure SSO | https://login.example.com
| /uas/*
/password-reset/*
/password/*
/cdc /* | http://localhost:8080 | https://login.example.com /uas
=>
http://localhost:8080/uas
| Ubisecure SSO Management | https://manage.example.com
| /ubilogin/*
/logviewer/*
/search/*
/sso-api/*
/otpserver/* | http://localhost:8081 | https://manage.example.com /ubilogin
=> http://localhost:8080/ubilogin
| Ubisecure Accounting Service browser endpoints | https://accounting.example.com
| / accounting /* /oauth2/*
/login /* /api/*
NOTE: you may not desire to allow /actuator/* end points publicly | http://localhost:8084 | https://accounting.example.com /accounting/report
=> http://localhost:8084/accounting/report
|
* Either http or https scheme, host name, and the port number can be defined during installation. System software requirementsUbisecure requires SSL encrypted HTTP communications to operate securely. These pages provide instructions on setting up SSL with the provided Tomcat server (Ubilogin Server) using Certificate Authority-signed SSL server certificate. A self-signed certificate is automatically generated by the installation scripts for test purposes. A production environment requires a server certificate issued by a trusted third party (Certificate Authority, CA). Since SSO version 8.4 with Accounting Service feature a PostgreSQL Server RDBMS installation is a required system component. If you have already installed Ubisecure CustomerID you can use the existing PostgreSQL installation but you need to create a specific database for Accounting Service storage needs. Guidelines are given here for linux and here for Windows. Supported operating systemsPlease refer to Identity Server System Recommendations and Supported Platforms |