, InnerApps, LLC. ALL RIGHTS RESERVED. Install Guide

Transcription

1 , InnerApps, LLC. ALL RIGHTS RESERVED Install Guide

2 System Requirements.NET framework 3.5 SP1 Windows Server 2003 or above 2GB RAM minimum 2GHz Processor SQL Server (or SQL Express if no SQL server available) 1 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

3 Overview Begin the installation by running the Setup.exe program provided to you for installation. This setup application is a single unified installer that installs all of the components for Identity Syncronizer. There are three components to the installation: 1. The Identity Service a. Can be installed on any server class machine b. Only one service can be installed in a domain 2. The DC Agent a. Installed on each domain controller in the network b. Must be installed on every domain controller 3. The Identity Management Tools a. Automatically installed on the Domain Controllers b. Can be installed on Network Admin workstations Once you run the setup program the InstallShield wizard will be displayed. On the first screen click the next button to begin. 2 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

4 License Agreement: The next screen displayed is the license agreement. You must click the I accept the terms button before being allowed to proceed. You may optionally click the Print button to print a copy of the License Agreement for your records. After clicking I Accept, click the Next button to proceed with the installation. 3 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

5 Install Options: Installation Guide You may select either a Complete or Custom installation. A Complete installation installs all of the components of the Identity Syncronizer product and is typically only applicable for Domain Controllers. We recommend selecting the Custom install option and selectively choosing the features/options you wish to install. After clicking the Custom option, click Next to continue with the installation. Select which applications(s) will not be installed on the machine by clicking the icon on the left and selecting This feature will not be available. This will put a red X as the icon. This means that the feature you selected is disabled. 4 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

6 Identity Service: On the server where you will install the Identity Service the following options should be selected: ** PLEASE NOTE: You should only install the Identity Service on a single machine within your Windows Domain. This service will manage Identity Transactions for the entire domain. Installing the Identity Service on more than one machine is not support. 5 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

7 Domain Controllers: For each domain controller (DC) within your Windows Domain you should install Identity Syncronizer with the following features selected: ** PLEASE NOTE: You should only install the Identity Service on a single machine within your Windows Domain. This service will manage Identity Transactions for the entire domain. Installing the Identity Service on more than one machine is not support. Once you have selected the options you would like to install then click the Next button. On the following screen click, Install to complete the installation. A progress indicator will flash across the screen as the files are loaded and registered. Once the various features are installed you will automatically be prompted to configure the system for each feature you selected to be installation. 6 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

8 Identity Syncronizer Database Under the section labeled Syncronizer Database fill in the name of the SQL Server and the User ID and Password for that server. The name for the Identity Syncronizer database must be specified here as well. If this database does not exist, it will be created during this step. Once you have specified the database information you can press the ellipsis button (the button with the three dots ) and a test connection will be made. 7 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

9 After clicking the button to test the connection, if no errors are detected, you will receive the following message. If the connection test fails, verify server name and security credentials entered to ensure they are correct. If they are correct verify that SQL server is running and reachable from the current machine. 8 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

10 Identity Syncronizer Interval Settings The interval settings determine how frequently Identity Syncronizer will perform certain functions. These settings are global in nature and effect the entire application: Sync - Responsible for synchronizing application, configuration, and list information between the target systems and IDSync. Reconciliation Handles reconciling Active Directory to the target system based on Transaction This settings controls the actual processing of transactions that are created when passwords are changed, users are updated, new users are created, etc. This setting controls how frequently the system checks for new transactions. The Transaction Retry limit can be overridden. By default this value will be 300. This value indicates how many times a transaction is allowed to retry before flagging as an error and disabling the transaction. 9 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

11 Agent Configuration The Agent is a lightweight component that is installed on each Domain Controller DC) in the domain. When installing the Agent component the agent configuration screen is displayed. In this screen you will need to enter the SQL Server database where the Identity Syncronizer database resides. Enter the server name/ip address, service user, service password, and database name. You may also select the logging level for which the Agent Service logs will run. The higher the level setting the more verbose the logging will be. Once you have entered the correct data you can click the ellipsis ( ) button on the database server box to do a test connection. If everything connected successfully then click the Install button to install and run the Agent Service. 10 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

12 Then click OK. Once the agent has been installed it is REQUIRED that you restart your machine for the changes to take effect and begin capturing passwords. 11 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

13 MMC Installer The MMC Installer will run automatically and will copy over the necessary files for the ADUC tabs into the System32 directory which are required to display the hosted Autotask tab. During setup this feature will run automatically. 12 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

14 Configuring the Autotask Integration Installation Guide The Connection Settings tab is used to enter information that Autotask will need to use. This includes information on connecting to the Autotask API. The first four are relevant to the SQL Server environment for Identity Syncronizer itself. This information will already be pre-populated if the Identity Syncronizer configuration has been run on the machine. If the data is not present then enter the database server, user, password, and database name. Click the ellipsis ( ) in the Database Server text box to test the connection. 13 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

15 The next five text boxes are relevant to the Autotask environment. First, enter the URL address of the Autotask instance where your account resides. Next, enter an Autotask administrator account name and password. It is important that an administrator level user be entered here because this is used to create, delete, and provision users and update user information. Once this information is entered you can click on the next to the API Url field to test the connection. The next two entries in this tab are used for entering the local Active Directory administrator and password. Domain administrator credentials are required for two reasons: 1. There is a small amount of data that needs to be written to active directory for Identity Syncronizer to function correctly. A program id to identify the tabs in active directory is written to the adminpropertypages property of CN=user-Display 2. The administrator credentials are also used to query active directory during the reconciliation process. Under the context of these credentials the system is able to check enabled/disabled state of an AD user and also if a user has been deleted. 14 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

16 License Code Each installation of Identity Syncronizer must have a valid license key. If you do not have a license key for your installation, please contact your sales representative to obtain one. Enter your license code in this tab. Click the ellipsis button ( ) to verify if your key is valid. Integration features will not function if a valid license key is not provided. 15 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

17 Metadata Syncronization Options Installation Guide The Metadata Sync tab controls what metadata elements are synched from the local active directory to the Autotask environment. Items that are checked will be copied for all users linked to the Autotask account; items that are not checked will not be updated. In the example above, a user s city, country, company, department, description, display name, fax, first name, home phone, info, initials, last name, mobile, pager, office name,postal code, state, address, telephone and title would be copied from the local active directory while the other values would not. Once all of the values are set click the OK button. 16 P a g e C o p y r i g h t , I n n e r A p p s, L L C.

18 Installation Complete Once the installation is finished, click Finish to close the installer and the installation is completed. 17 P a g e C o p y r i g h t , I n n e r A p p s, L L C.