Expertflow SSO Utility Deployment Guide

Overview

The project's primary purpose was to develop a backend module that gets SSO(Single Sign On) Token from Cisco IDS and passes that token to the agent for their XMPP subscription and calls all cisco finesse APIs.

Prerequisites

The following are the mandatory prerequisites for a smooth installation.

Hardware Requirements

These requirements suffice for deployment.

Software Requirements

Port Utilization Requirements

The default port used by the service is port <1125>whereas it can be changed when deploying the docker image. Following ports should remain open on the Firewall. The local security policy and any antivirus should also allow open communication on the following ports:

** Server Application = This is the backend application we will deploy for the SSO Utility. 

** Client Application = Agent browser on which Agent will access the AccessToken.

** IDS Server Server = Machine IP where Identity Service Management is deployed which is integrated with the finesse.

** ASDF Server = Active Directory Federation Services through all SSO agents are authenticated

Time Synchronization Requirements

The system can produce unpredictable results if the system date and time are not synchronized. Therefore, please make every effort to adhere to the following time synchronization guidelines:

The server machine and Agents machines should have their Time Zone and time configured properly according to the geographic region and synchronized. The application servers should be synchronized to the second. This synchronization should be maintained continuously and validated on a regular basis.

Software installation guide

Kindly follow the link mentioned below for the installation of each required software.

Deployment Steps

Run Utility as a Docker Container

1. Pull the latest release of SSO Utility from gdrive and extract the zip folders.
   Image Modified
   

2. run the following command in Linux server
   mkdir –m777 SSO_utility

3. this will create the SSO_utility directory. 

4. use cd command to go into the SSO_utility directory
   cd SSO_utility
   

...

1. Image Added

2. upload the extracted files into this directory.
   Image Modified

3. Edit your environment variable file.

4. now run deploy.sh file using the following command:
   bash deploy.sh
   Image Modified
   and you can see after completion your docker image is running
   Image Modified

5. if you see any permission denied error kindly run the following command and after that run step 7 again
   

   Add Permission

   Code Block
   language bash

...

...

1. cd .. chmod -R 777 SSO_utility cd SSO_utility

Run Utility as a Windows Service

Pull the latest release of SSO Utility Service from gdrive and extract the zip folders into some directory and follow the step to run the service in windows as a service:Image Removed

...

1. navigate to the directory where you have extracted the utility.
   Image Modified

2. Edit your configuration file.

3. open the windows PowerShell/ cmd as administrator, navigate to the directory where nssm.exe, scheduling-tasks-0.0.1-SNAPSHOT.jar and run.bat files are placed. 
   Image Modified

4. run the .\nssm.exe install SSO_Utility command.
   Image Modified
   

5. windows popup will appear, select the path of run.bat file.
   Image Modified
   

6. Click install service and close the PowerShell/ cmd
   Image Modified
   

7. open windows services settings, search for SSO_Utility, and open that service.
   
   Image Modified

8. check startup type is Automatic or not, if not select Automatic.
   Image Modified
   

9.  then press the start, and the extension module will be up in the background.
   Image Modified

Edit Configurations

open the environment-variable.env file using vi or vim command as mentioned bellow:

vim environment-variable.env

Note: If you wanted to know about vim command, Here is the the detail.

In case of running utility as a windows service

...

1.  Right click the .jar file and open with WinRAR.
   Image Modified

2. navigate to \BOOT-INF\classes
   Image Modified
   

3. open application.properties file and edit properties according to the following table
   Image Modified

Info
title	Note ** IF you want to change certificates, then use Deploy Creating Local Image, replace your certificate files in the cert folder, and update the environment-variable.env file.Image Removed Image Added

Register Your Application on IDS

1. Navigate to the Identity Service Management console by going to: https://<your_CCX_Host>:8553/idsadmin

2. Login using the Cisco UCCX/UCCE application user credentials.

3. Select the Clients icon on the left side of the navigation.
   Image Modified

4. Click on the New button on the upper right-hand side.

5. Fill the form

   • Enter a unique name for the client (partner application).

   • Enter one or more redirect URLs to which the authorization code has to be delivered. https://<utility_server_Host>:<utility_port>/idscallback

   • Click the '+' button on the right of the input field.
     Image Modified

   • Add multiple IPs if you have deployed multiple SSO utility instances.
     

...

1. • Image Added

2. Click the Add button to add the client

3. you can see the client_id in the second column of clients table
   

...

1. Image Added

Verification Test

Call the following API to test if the utility is working and your configuration are updated.

...

On successful calling the API you can see the ids properties in docker container logs, to open docker service logs using the following commands 

• Execute the following command an copy the docker image id

docker ps -a |grep ssoconnector

...

• Execute the following command to open docker logs

docker logs -f 1fa793a0c9ea

you can see your ids propertiesImage Removed

...