Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

After the DualShield Computer Logon Agent has been successfully installed, it needs to be set up first.

On the machine where the Logon Agent in installed, start a Web browser and enter "http://localhost:8086" in the address bar go through the following steps:

Table of Contents
maxLevel3
minLevel3

Step 1 - Agent Console FQDN

Image Added

The admin console of the Logon Agent is a web portal, therefore it needs to have a hostname, or fully qualified domain name (FQDN). By default, the full computer name is suggested as the Agent's hostname. 

Step 2 - Server FQDN

Image Added

Server FQDN: Enter the FQDN of your DualShield authentication server

Click "Next" to continue

Step 3 - Agent Registration

In order to register the Logon Agent with the Authentication Server, we need to first enable the Agent Registration option.

Expand
titleEnable Agent Registration

Include Page
Enable Agent Registration
Enable Agent Registration

Image Added

Agent Name: A agent name is only used to describe the agent. If you are going to install multiple agents, make sure that you name each of the agent with a distinctive and easy to identify name.

Click "Next" to continue

Step 4 - Service Provider Setup

Image Added

For security,  the agent console will require user authentication, therefore it needs to be registered with your DualShield SSO as a service provider. 

Please note, if you are installing multiple logon agents, then you need to make sure that every agent has its own service provider. In other words, a service provider cannot be shared by multiple agents.

If this is the very first time that you're setting up this agent, click the "Create New Service Provider" button to create a new service provider for this agent.

Image Added

A service provider needs to be associated with an application in your DualShield server. 

Please note, in contrary to that a service provider should not be shared by multiple agents, an application can be shared and generally should be shared by all logon agents.

If this is the very first time that you're setting up an agent, select the existing "Management Console" application from the application list. Do not create a new application. 

Image Added

Now, click the "Create" button to create a new service provider for this agent

Image Added

Click "Next" to continue

Step 5 - Completion

Image Added

The agent has now been successfully registered. 

Click "Finish" to continue. The agent admin console will be launched

Step 6 - Set up Agent Application

Image Added

Sign in to the admin console

Image Added

Click "Agent" in the main menu on the top

Image Added

In the Computer Logon section, from the application list, select the application that you have set up earlier for computer logon, e.g. Computer Logon

Image Added

Click the "Save" button in the Computer Logon section.

Image Added

You have now completed the agent registration and application setup.