Page History

Indeed AM Self Service is an IIS-based web application. Users can manage their own authenticators in this module. 

Installation

1. Install the Indeed AM Self Service by running IndeedAM.SelfService-x64.ru-ru.msi installer.

2. Add HTTPS binding in Default Web Site settings of IIS Manager.

   1. Run IIS Manager and expand the Sites item.

   2. Select the Default Web Site site and click Bindings item in the Actions section.

   3. Click Add:
      1. Type - https.
      2. Port - 443.
      3. Select the SSL Certificate.
   4. Save the binding.

Customization

Authentication using Windows Authentication

1. Open the IIS Manager, select Default Web Site, and open the iidselfservice app. 
2. Click on Authentication and enable the following parameters: 
1. ASP.NET impersonation 
2. Windows authentication
3. Disable all other parameters. 
4. Open the Self Service Web.config configuration file (C: \inetpub\wwwroot\iidselfservice\Web.config). 

5. Insert Windows in the mode parameter of the amAuthentication tag.

   Info
   Please leave the loginUrl parameter unchanged. This parameter will not be used during Windows authentication.

   
   

   Code Block
   language yml
   <amAuthentication mode="Windows" loginUrl="" enableLogout="true" />

   
   

6. Restart the IIS server.

Authentication using SAML idp

1. Open the Self Service Web.config configuration file (C: \inetpub\wwwroot\iidselfservice\Web.config). 
2. Insert the URL for Indeed server connections (use the URL parameter in the amAuthServer tag). 

1. URL parameter: Indeed server location should be specified as follows: http(s)://full_dns_server_name/easerver/.

   Info
   The system will ignore server certificate errors if you set the isIgnoreCertErrors parameter to true in the applicationSettings.config file (iidselfservice\Config).

   
   

   Code Block
   language yml
   <amAuthServer Url="https://amserv.indeed-id.local/easerver"/>

   
   

3. Insert the URL for Indeed SAML server connections (use the loginUrl parameter in the amAuthentication tag). 
1. The loginUrl parameter: the location of the server with pre-installed Indeed SAML idp component should be specified as follows: http(s)://full_dns_server_name/iidsamlidp/. 

2. The enableLogout parameter (optional) activates Self Service logout. 

   Code Block
   language yml
   <amAuthentication mode="Saml" loginUrl="http://saml.demo.local/iidsamlidp" enableLogout="true"/>

   
   

4. Open the SAML Web.config configuration file (C: \inetpub\wwwroot\iidselfservice\Web.config). 
5. Indicate the URL for Self Service server connections (use the SelfServiceUrl parameter in the amPartnerServiceProviderSettings tag). 

1. The SelfServiceUrl parameter: the location of the server with the pre-installed Indeed Self Service component should be specified as follows: http(s)://full_dns_server_name/iidselfservice/.

   Code Block
   language yml
   <amPartnerServiceProviderSettings SelfServiceUrl="http://dc.demo.local/iidselfservice/" EmcServiceUrl="EMC_SERVICE_URL"/>

   
   

6. Once you have finished editing the configuration files, please restart the IIS server. Self Service will be available at http(s)://full_dns_server_name/iidselfservice/.

Self Service login using SAML

1. Open Self Service web interface in your browser. 
2. In the pop-up SAML authentication window, click Back if you want to select authentication method. By default, most recent method will be used.

3. Choose an authentication method and click Select.

   Info
   If you do not have a trained authenticator, select Windows Password.

   
   

   Note
   When logging out of the SAML idp user session, you will not be logged out of Self Service until you restart your browser or your cookies expire. The SAML idp cookies will be stored for 30 minutes.

   
   

   
4. Please enter your password and click Sign in. Once the data has been successfully added, you will be redirected to the user profile.

5. If you want to exit Self Service, proceed as follows:

   Note
   This option will be active if you switched on the enableLogout parameter at the step 3.b above. Self Service logout is disabled by default.

   
   

1. Click on the username at the top of the window. 

2. Select Logout from the drop-down list.

   
   

   Info
   When logging out of Self Service, you will also be automatically logged out of SAML idp.