Indeed AM Self Service

Indeed AM Self Service is an IIS-based web application. Users can manage their own authenticators in this module. 

Installation

1. Install the Indeed AM Self Service by running IndeedAM.SelfService-x64.ru-ru.msi installer.

2. Add HTTPS binding in Default Web Site settings of IIS Manager.

   1. Run IIS Manager and expand the Sites item.

   2. Select the Default Web Site site and click Bindings item in the Actions section.

   3. Click Add:
      1. Type - https.
      2. Port - 443.
      3. Select the SSL Certificate.
   4. Save the binding.

Customization

Authentication using Windows Authentication

1. Open the IIS Manager, select Default Web Site, and open the am/uc app. 
2. Click on Authentication and enable the following parameters: 
1. ASP.NET impersonation 
2. Windows authentication
3. Disable all other parameters. 
4. Open the Self Service Web.config configuration file (C: \inetpub\wwwroot\am\uc\Web.config). 

5. Insert Windows in the mode parameter of the amAuthentication tag.

   Please leave the loginUrl parameter unchanged. This parameter will not be used during Windows authentication.

   <amAuthentication mode="Windows" loginUrl="" enableLogout="true" />

6. Restart the IIS server.

Authentication using SAML idp

1. Open the Self Service Web.config configuration file (C: \inetpub\wwwroot\am\uc\Web.config). 
2. Insert the URL for Indeed server connections (use the URL parameter in the amAuthServer tag). 

1. URL parameter: Indeed server location should be specified as follows: http(s)://full_dns_server_name/am/core/.

   The system will ignore server certificate errors if you set the isIgnoreCertErrors parameter to true in the applicationSettings.config file (am\uc\Config).

   <amAuthServer Url="https://amserv.indeed-id.local/am/core/"/>

3. Insert the URL for Indeed SAML server connections (use the loginUrl parameter in the amAuthentication tag). 
1. The loginUrl parameter: the location of the server with pre-installed Indeed SAML idp component should be specified as follows: http(s)://full_dns_server_name/am/idp/. 

2. The enableLogout parameter (optional) activates Self Service logout. 

   <amAuthentication mode="Saml" loginUrl="http://saml.demo.local/am/idp" enableLogout="true"/>

4. Open the SAML Web.config configuration file (C: \inetpub\wwwroot\am\uc\Web.config). 
5. Indicate the URL for Self Service server connections (use the SelfServiceUrl parameter in the amPartnerServiceProviderSettings tag). 

1. The SelfServiceUrl parameter: the location of the server with the pre-installed Indeed Self Service component should be specified as follows: http(s)://full_dns_server_name/am/uc/.

   <amPartnerServiceProviderSettings SelfServiceUrl="http://dc.demo.local/am/uc/" EmcServiceUrl="EMC_SERVICE_URL"/>

6. Once you have finished editing the configuration files, please restart the IIS server. Self Service will be available at http(s)://full_dns_server_name/am/uc/.

Self Service login using SAML

1. Open Self Service web interface in your browser. 
2. In the pop-up SAML authentication window, click Back if you want to select authentication method. By default, most recent method will be used.

3. Choose an authentication method and click Select.

   If you do not have a trained authenticator, select Windows Password.

   When logging out of the SAML idp user session, you will not be logged out of Self Service until you restart your browser or your cookies expire. The SAML idp cookies will be stored for 30 minutes.

   
4. Please enter your password and click Sign in. Once the data has been successfully added, you will be redirected to the user profile.

5. If you want to exit Self Service, proceed as follows:

   This option will be active if you switched on the enableLogout parameter at the step 3.b above. Self Service logout is disabled by default.

1. Click on the username at the top of the window. 

2. Select Logout from the drop-down list.

   When logging out of Self Service, you will also be automatically logged out of SAML idp.