After the DualShield Computer Logon Agent has been successfully installed, it needs to be set up first.

On the machine where the Logon Agent in installed, start a Web browser and enter "http://localhost:8086" in the address bar go through the following steps:

Step 1 - Agent Console FQDN

The admin console of the Logon Agent is a web portal, therefore it needs to have a hostname, or fully qualified domain name (FQDN). By default, the full computer name is suggested as the Agent's hostname. 

Step 2 - Server FQDN

Server FQDN: Enter the FQDN of your DualShield authentication server

Click "Next" to continue

Step 3 - Agent Registration

In order to register the Logon Agent with the Authentication Server, we need to first enable the Agent Registration option.

For an authentication agent to be able to connect to the DualShield authentication server, the agent must be registered in the DualShield authentication server.

For security purposes, the agent registration function is disabled by default. You need to enable the Agent Auto Registration function in your DualShield authentication server.

From the management console, navigate to "Authentication | Agents", then click  


A new window will now open titled "Auto Registration", ensure the "Enabled" option is selected, then click ;


Tick the "Enabled" option first, then fill in the Starts and Expires date.

You may want to enable the "Check IP" option for extra security. If this option is enabled, then in the "IP Addresses" field you must enter the IP address of the machine where the authentication agent is being installed.

Click on the button, and Auto-Registration will now take place during the installation of the RADIUS server.

Agent Name: A agent name is only used to describe the agent. If you are going to install multiple agents, make sure that you name each of the agent with a distinctive and easy to identify name.

Click "Next" to continue

Step 4 - Service Provider Setup

For security,  the agent console will require user authentication, therefore it needs to be registered with your DualShield SSO as a service provider. 

Please note, if you are installing multiple logon agents, then you need to make sure that every agent has its own service provider. In other words, a service provider cannot be shared by multiple agents.

If this is the very first time that you're setting up this agent, click the "Create New Service Provider" button to create a new service provider for this agent.

A service provider needs to be associated with an application in your DualShield server. 

Please note, in contrary to that a service provider should not be shared by multiple agents, an application can be shared and generally should be shared by all logon agents.

If this is the very first time that you're setting up an agent, select the existing "Management Console" application from the application list. Do not create a new application. 

Now, click the "Create" button to create a new service provider for this agent

Click "Next" to continue

Step 5 - Completion

The agent has now been successfully registered. 

Click "Finish" to continue. The agent admin console will be launched

Step 6 - Set up Agent Application

Sign in to the admin console

Click "Agent" in the main menu on the top

In the Computer Logon section, from the application list, select the application that you have set up earlier for computer logon, e.g. Computer Logon

Click the "Save" button in the Computer Logon section.

You have now completed the agent registration and application setup.

  • No labels