Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The type of the logon procedure should be set as "Web SSO"

And the logon procedure does not have to contain any logon steps.


To register an API agent, select "Authenticaton | Agents" in the main menu, then click the "Register" button in the toolbar.

The type of the agent must be set to "API Agent".
Make sure that you select the application that you have created for the agent.
You can enable the "Check Agent IP" option for extra security. If this option is selected then you must provide the IP address of the machine where your application is running.
The communication protocol between the agent, i.e. your application and the DualShield is always HTTPS, therefore DualShield will create a an SSL certificate for the agent.
The Agent Registration Data is not required.

...

As mentioned, the communication protocol between your application and the DualShield is always HTTPS. Therefore you need to download the agent's certificate which will be required in your application codes.
You can use either PKCS12 or PEM certificate in your code.


To download a PEM format certificate, in the Agents list, click the context menu of your agent and select "Download | Agent SSL Certificate (PEM)". The certificate will be saved as "My Application.PEM". This PEM certificate contains both the certificate and the private key.
If you are using some programming language, like python, you might want to extract the private key separately. You can use the OpenSSL tool:

...