/
Installation requirements - SSO

Installation requirements - SSO

2018-10-16

Java

  • Java must be preinstalled on the server (including Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files).

    • We have tested Ubisecure SSO with Oracle Java 8 update 181 64 bit Server JRE version.

    • If you want to use a newer Java version check with our support if we have already tested Ubisecure SSO with it.

    • You can find the download site in the address: http://www.oracle.com/technetwork/java/javase/downloads/index.html

    • Refer to Oracle online documentation for installing the Server JRE: https://docs.oracle.com/javase/8/docs/technotes/guides/install/linux_server_jre.html

    • Instructions to install JCE Policy Files are included in the download package. Starting from Java 8 update 162 the unlimited policy is enabled by default.

Network requirements

For production installations you must have a load balancer or proxy in front of Ubisecure SSO with the following configuration.

Product

Publicly facing URL

Source Port

Destination Port

Ubisecure SSO

https://sso.example.com/ubilogin

443

8443

*Ubisecure CustomerID

https://sso.example.com/eidm2/wf/self-service

443

7443

*In case CustomerID is used, or will be used in the future, requests to URLs, /eidm2/* (user interface) and /customerid-rest/* (REST API calls), must be routed to port 7443 on node 1.

DO NOT start the installation until this is done. Installation will fail.

System software requirements

Ubisecure requires SSL encrypted HTTP communications to operate securely. These pages provide instructions on setting up SSL with the provided Tomcat server (Ubilogin Server) using Certificate Authority-signed SSL server certificate. A self-signed certificate is automatically generated by the installation scripts for test purposes. A production environment requires a server certificate issued by a trusted third party (Certificate Authority, CA).

Supported operating systems

Please refer to Release notes - SSO.