SSO Adapter installation on Windows - CustomerID

CustomerID SSO Adapter provides extensions to Ubisecure SSO to allow extended use of role based policies and other functionality related to user driven federations.

The Ubisecure CustomerID SSO Adapter is included in the Ubisecure CustomerID installation package.

NOTE: The installation instructions concerning Ubisecure CustomerID SSO Adapter are written for a single Ubisecure SSO node. If you have more nodes then these steps should be done on all nodes.

To install the Ubisecure CustomerID SSO Adapter extension to Ubisecure SSO:

  1. Define UBILOGIN_HOME environment variable for the Ubisecure SSO server so that it points to the Ubisecure SSO installation path: %PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin

    set UBILOGIN_HOME=%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin
  2. Copy the cid-sso-adapter-package-x.x.x-windows.zip file to the Ubisecure SSO server and extract it under the following folder: %PROGRAMFILES%\Ubisecure
  3. Run the Ubisecure CustomerID SSO Adapter installation script:

    cd /D "%PROGRAMFILES%\Ubisecure\cid-sso-adapter"
    install.cmd

    There are now two new configuration files in the following folder: %PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\

    The new configuration files are:

    • attribute-prefix.index
    • eidm2-authorizer.properties

    Also some new library files have now been added to the %PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\webapps\uas\WEB-INF\lib folder.

  4. You may now need to make some changes to the eidm2-authorizer.properties according to your installation configuration. Generally no changes are required. For more details, refer to the document Configuration - CustomerID.

  5. Run update.cmd on Ubisecure SSO in using the following command:

    "%PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\config\tomcat\update.cmd"
  6. Ensure that the diagnostics log (uas3_diag.yyyy-mm-dd.log, which is by default located at %PROGRAMFILES%\Ubisecure\ubilogin-sso\ubilogin\logs) contains the following rows (with the current time): 

    2016-09-02 13:57:49,021 init CustomerID Authorizer started
    2016-09-02 13:57:49,021 authz eidm.authorizer: CidAuthorizer init started.
    2016-09-02 13:57:49,209 init CustomerID SQL: customeriddb PostgreSQL x.x.x
    2016-09-02 13:57:49,224 authz eidm.authorizer: CidAuthorizer init done.
    2016-09-02 13:57:49,224 init eidm: com.ubisecure.customerid.authorizer.CidAuthorizer: started