Ubisecure CustomerID package includes the CustomerID SSO Adapter extension to SSO (it was previously called Ubisecure CustomerID Authorizer). It needs to be installed so that role based policies can be utilized in CustomerID. It also includes functionality related to user driven federations.
This page describes the steps that need to be performed concerning CustomerID when SSO used by CustomerID is being upgraded. Normally, both SSO and CustomerID are upgraded at the same time.
When you upgrade SSO, you need to copy the CustomerID SSO Adapter configuration files from the old SSO installation to the new one. When you upgrade CustomerID, you need to update the adapter implementation
The steps to follow in Windows:
After upgrading SSO (as instructed in page Upgrading SSO in Windows ), prior to removing the temporary ubilogin-sso-old folder, go to the folder containing the old configuration files:
cd /D "%PROGRAMFILES%\Ubisecure\ubilogin-sso-old\ubilogin\webapps\uas\WEB-INF\"
Copy the existing configuration files to the new installation folder:
copy attribute-prefix.index eidm2-authorizer.properties to %PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\
NOTE: If you are upgrading from an installation where the previous CustomerID SSO Adapter has been from a CustomerID version older than 5.0.x then you need to check the
attribute-prefix.index
configuration file contents. The value for theeimd
property has changed fromcom.ubisecure.customerid.authorizer.EIDM2Authorizer
tocom.ubisecure.customerid.authorizer.CidAuthorizer
.Define UBILOGIN_HOME environment variable for the SSO server so that it points to the SSO installation path:
%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin
set UBILOGIN_HOME=%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin
- Transfer the
cid-sso-adapter-package-x.x.x-windows.zip
file to the SSO server and extract it for example under the following folder:%PROGRAMFILES%\Ubisecure
Run the CustomerID SSO Adapter update script:
cd /D "%PROGRAMFILES%\Ubisecure\cid-sso-adapter" update.cmd
The CustomerID SSO Adapter jar files will be integrated to the SSO installation.
Remove older versions of duplicate jar files from SSO:
%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\lib
NOTE: If you are upgrading from an installation where the previous CustomerID SSO Adapter has been from a CustomerID version older than 5.0.x then you need to remove old CustomerID Authorizer files. The files that need to be removed are:
commons-lang.jar, eidm2-authorizer.jar, eidmutil.jar, json-simple.jar
andjsr305.jar
. Remove the files from these folders:%PROGRAMFILES%\Ubisecure\ubilogin-sso\tomcat\webapps\uas\WEB-INF\lib
and%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\lib
NOTE: If you are upgrading from an installation where the previous CustomerID SSO Adapter has been from a CustomerID version 5.0.x or newer then you may need to remove old versions of CustomerID SSO Adapter related jar files. The files that need to be checked are:
cid-model-x.x.x.jar, cid-sso-adapter-x.x.x.jar, cid-util-x.x.x.jar, commons-lang3-x.x.jar, guava-x.x.jar
andjson-simple-x.x.x.jar
. Remove the old versions of these files from these folders:%PROGRAMFILES%\Ubisecure\ubilogin-sso\tomcat\webapps\uas\WEB-INF\lib
and%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\lib.
The removal should be done after running theupdate.cmd
script.Run update on SSO in order to finalize the installation of the CustomerID SSO Adapter. This can be done with the following command:
"%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\config\tomcat\update.cmd"
Ensure that the SSO diagnostic log (
sso_diag
.year-month-day.log
, which is by default located at%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\logs
) contains the following rows (with the current time):2022-10-06 07:25:25,711 uas init INFO CustomerID Authorizer started 2022-10-06 07:25:25,711 uas authz INFO eidm.authorizer: CidAuthorizer init started. 2022-10-06 07:25:26,083 uas init INFO CustomerID SQL: customeriddb PostgreSQL 12.8 2022-10-06 07:25:26,130 uas authz INFO eidm.authorizer: CidAuthorizer init done. 2022-10-06 07:25:26,130 uas init INFO eidm: com.ubisecure.customerid.authorizer.CidAuthorizer: started