Federated Identity Configurator

The available fields and the order of the fields depend on the product and provider.

Note:

• All values can be retrieved from your identity provider portal. For more information on how to retrieve these values, see How-to: Retrieving information for Windows Azure Active Directory and Auth0.
• All values are case-sensitive; you should use the exact value, including any symbols. You are advised to always use lowercase to avoid a mismatch of the values.

Products menu section

Select the product for which you want to view, edit and/or (re)apply the FID configuration.

Tools menu section

Client/Server

This tool should be used to test the federated identity authentication between two products by specifying a client environment and a server environment.

Main section

The available fields and the order of the fields depend on the selected product and identity provider.

Installation Folder

Type or select the installation folder of the product that is selected in the Products menu. When a path is specified, the tool will validate the path. If the path is validated successfully, the configuration section and buttons will be enabled. If the current or previous environment has been configured for FID, the values will be automatically loaded. If the current environment has no FID configuration, the text fields in the configuration sections will be cleared for user input.

Identity Provider

Select the identity provider for which you want to view, edit and/or (re)apply the FID configuration:

• Auth0
• Windows Azure Active Directory

Note: This field is available only when a valid installation folder is selected.

Protocol

Select the protocol that will be used by the product for login purposes. You can select SAML or OAuth.

Note: This field is available only if Exact Synergy Enterprise is selected at the Products menu.

SAML Issuer Name

Define the SAML issuer name from your identity provider portal.

Authority

Define the authority from your identity provider portal.

Auth0 Connection

Define the Auth0 connection from your Auth0 portal.

Note: This field is available only if Auth0 is selected at Identity Provider.

JWT Issuer Name

Define the JWT issuer name from your Auth0 portal.

Note: This field is available only if Auth0 is selected at Identity Provider.

Client ID

Define the client ID from your identity provider portal.

Client ID (Web)

Define the client ID (web) from the WAAD portal.

Note: This field is available only if OAuth is selected at Protocol.

Client Secret

Define the client secret from your identity provider portal.

Note: This field is available only if OAuth is selected at Protocol.

Allowed Audience

Define the allowed audience from your identity provider portal.

Allowed Audience (Web)

Define the allowed audience (web) from the WAAD portal.

Note: This field is available only if Windows Azure Active Directory is selected at Identity Provider.

Realm

Define the realm from your identity provider portal.

Note: This field is only available if Exact Synergy Enterprise is selected at the Products menu.

Audience URI

Define the audience URI from your identity provider portal.

Note: This field is available only if Exact Synergy Enterprise is selected at the Products menu.

Thumbprint

Define the thumbprint from your identity provider portal.

Metadata

Define the metadata from your identity provider portal.

Authorize Endpoint

Define the authorize endpoint from your identity provider portal.

Note: This field is available only if OAuth is selected at Protocol.

Token Endpoint

Define the token endpoint from your identity provider portal.

Note: This field is available only if OAuth is selected at Protocol.

WS FED Issuer

Define the WSFED issuer from your identity provider portal.

Note: This field is available only if Exact Synergy Enterprise is selected at the Products menu.

Reply

Note: This field is available only if Exact Synergy Enterprise is selected at the Products menu.

App URI ID

Define the App URI ID from your WAAD portal.

Note: This field is available only if Exact Synergy Enterprise is selected at the Products menu and WAAD is selected at Identity Provider.

Resource

Define the resource from your WAAD portal.

Note: This field is available only if WAAD is selected at Identity Provider and Exact Globe+ or Exact Lightweight Integration Server is selected at the Products menu.

Information Section

This section displays informational and/or error messages based on your actions:

Note: This section is applicable only to the Products menu.

Tool: Client Server Section

The fields in this section can be used to test the federated identity authentication between two products by specifying a client environment and a server environment. For example, registering an ESE endpoint in ELIS requires FID authentication from ELIS to ESE. Authentication errors can be tested by specifying ELIS as the client and ESE as the server, and using this tool to retrieving detailed error messages.

Connect From

Select the client environment for which to test the federated identity authentication.

Note: This field is available only if Client/Server is selected at the Tools menu.

To

Select the server environment for which to test the federated identity authentication.

Note: This field is available only if Client/Server is selected at the Tools menu.

User name

Define the username used to log in to the client environment and server environment.

Note: This field is available only if Client/Server is selected at the Tools menu.

Password

Define the password used to log in to the client environment and server environment.

Note: This field is available only if Client/Server is selected at the Tools menu.

Result

This field displays the log of the validation. Detailed authentication error messages as well as authentication information (for example, expiry date of security tokens) will be displayed here.

Note: This field is available only if Client/Server is selected at the Tools menu.

Validate

For the Products menu, click this to validate the values from the product screen for common mistakes, such as formatting, typos, et cetera. The tool will warn you when a value is suspected to be wrong so that you can verify and correct it if needed. Define a username and password (from your federated identity account) to test if the configuration values are correct for authentication use.

For the Tools menu, click this to validate the connection between the client environment and server environment. The results of this validation will be displayed at the Result field.

Note:

• For the Products menu, this button is enabled only if a valid installation folder is entered.

Generate

Click this to generate the FID configuration for the selected product. You can generate the FID configuration only after a successful validation. When you click Generate, the Exact Globe+: Validate screen opens with the message “Please validate details in order to generate configuration files.” If you fail to validate the details, the message “Could not generate: Configuration is not validated or failed to be validated.” is displayed when you return to the FID configurator tool screen. FID will not work if you do not complete the configuration using the FID configuration tool.

Based on the selected product, the following configuration files will be generated or updated:

• Exact Synergy Enterprise
  • system.identityModel.config
  • system.identityModel.services.config
  • web.config
  • XMD\FIDConfig.xml
• Exact Globe+:
  • Bin\EntityServiceIdentity.config
  • Bin\GlobeIdentity.Config
  • XMD\Exact.WindowsService.config
• Exact Lightweight Integration Server
  • XMD\Exact.ELISVersion.config
  • XMD\Exact.EntityServiceIdentity.config

Note: This button is applicable only to the Products menu. It is enabled when the installation folder is directed to an environment configured for FID.

Clear

Click this to clear all fields.

Related document

• Federated Identity (FID) startpage