Management UI common tasks - SSO
This page introduces basic tasks that the System Administrator needs to carry out in order to use Ubisecure SSO and its services.
Contents
- 1 Logging into Ubisecure SSO Management for the first time
- 2 Creating a site hierarchy
- 3 Creating a New Site
- 4 Adding a New Group to a Site
- 5 Adding a New User to a Site and to a Group
- 6 Creating a new Web Application
- 7 Adding New Site Managers
- 8 Removing Site Managers
- 9 Creating a New Method
- 10 Creating a New Method Attribute Mapping
- 11 Creating a New Directory User Mapping
- 12 Mapping Authenticated User to Directory User – Steps to Consider
Logging into Ubisecure SSO Management for the first time
After installing and setting up the Ubisecure SSO accordingly, the System Administrator can log in to the Ubisecure SSO Management application.
The initial login and password for the System Administrator identity is presented in page SSO Single Node Installation.
NOTE: It is important to change the System Administrator password to a strong password.
After successful login to Ubisecure SSO Management, the administrator can see the following view (Figure 1).
 |
|---|
Figure 1: The first view after logging into Ubisecure SSO Management |
The System Administrator view differs from the view seen by Site Manager. The Site Manager cannot configure the "Global Method Settings" and cannot reset the server secret.
The typical tasks in Ubisecure SSO Management after the first login are creating new objects on the server. For more details, please see the following chapters.
Creating a site hierarchy
The tree hierarchy in the database can be used to partition a large database into smaller entities, which are then easier to manage.
For example, the site structure used to manage the employees of a company can be created to match the organizational hierarchy of the company:
Corporation
Management
Production
Research
Another way to divide entities in the organization is to assign each kind of object for each site:
Corporation
Applications
Groups
Users
Roles
Another important purpose of the Site hierarchy is the concept of delegation of management tasks. Each Site can be assigned a set of users as Site Managers that can manage any of the entities contained within that Site, including any sub sites. It is also important to note that Ubisecure SSO hides and prevents access to any other sites where the user is not assigned to the sites Site Administrator groups.
An example of delegating management tasks to Site Managers:
Corporation; Managed by "System Administrators"
Research; Managed by "Research Administrators"
Production; Managed by "Production Administrators"
In this scenario the members of the System Administrators group can see and manage the entire database whereas the members of the Research Administrators group can see and manage entities only within the Research site.
Creating a New Site
To create a new site:
Select a site where you want to add a new site.
Click "New…".
"Create site" window opens up. Give name and description for the site, and click OK to continue.
You have now created a new site.
Adding a New Group to a Site
To add a new group to a site:
Select a site where you want to add a new group.
Select "Groups" to add a group.
Click "New…".
"Create Group" window opens up. Give name and description for the group and click OK to continue.
You have now created a group.
Adding a New User to a Site and to a Group
To add a new user to a site and to a group:
Select a site where you want to add a new user.
Select "Users" to add an user.
Click "New…".
"Create User" window opens up.
Give the user a "Name" which appears in the Ubisecure SSO Management.
Give the user a "Username" which works as user ID.
Give the user a "Mobile Phone" number if user has mobile authentication methods in use.
Give the user other information if needed.
Click status "Enabled" to enable the user account.
Click OK.
New user is now created.Give the user a password by clicking "Reset password".
Type the password, enable the authentication method and click OK to continue.
Give the user the authentication methods he is allowed to use by clicking "Methods".
Select the allowed methods and click Update to continue.
Add user in the group that was created earlier by clicking "Member of".
Click "Add", select the group you want to add user to, and click OK to continue.