Enportal/5.5/admin/system administration/System Settings - Revision history

imported>Jason.nicholls at 06:50, 26 February 2015

2015-02-26T06:50:40Z

← Older revision		Revision as of 06:50, 26 February 2015
Line 9:		Line 9:
	== System Login Page ==		== System Login Page ==

	~~=== System Login Page ===~~
	The system login page is the page that all users will see when they first access the system.		The system login page is the page that all users will see when they first access the system.

	{{Note\|The login page can be changed for individual domains, by specifying a custom login page per [[enportal/5.5/admin/user_administration/enPortal_provisioning#Domains\|domain]]. The login page specified for a domain takes precedence over the system setting.}}

	~~<!-- insert screenshot for "system explorer - system login page assignment -->~~

	~~=== Assigning a System Login Page ===~~

	Login pages must exist on the enPortal server in the <tt>[INSTALL_HOME]/server/webapps/enportal/login_pages</tt> directory. Take a look in this directory to see the available options included with a default enPortal install:		Login pages must exist on the enPortal server in the <tt>[INSTALL_HOME]/server/webapps/enportal/login_pages</tt> directory. Take a look in this directory to see the available options included with a default enPortal install:
Line 25:		Line 18:
	* <tt>edgeLight_css3</tt>: new Light login page themed using CSS for easier customization		* <tt>edgeLight_css3</tt>: new Light login page themed using CSS for easier customization
	* <tt>edgeFlat</tt>: new Flat login page themed using CSS for easier customization		* <tt>edgeFlat</tt>: new Flat login page themed using CSS for easier customization

			{{Note\|The login page can be changed for individual domains, by specifying a custom login page per [[enportal/5.5/admin/user_administration/enPortal_provisioning#Domains\|domain]]. The login page specified for a domain takes precedence over the system setting.}}

			<!-- insert screenshot for "system explorer - system login page assignment -->

			=== Assigning a System Login Page ===

	Perform the following steps to assign a system login page:		Perform the following steps to assign a system login page:

imported>Jason.nicholls: /* System Login Page */

2015-02-26T06:41:51Z

System Login Page

@@ Line 32: / Line 32: @@
 # Click the ''Save'' button.
 # Logout of the portal and confirm that the correct login page is displayed.
 == Look and Feel ==

imported>Jason.nicholls: /* Assigning a System Login Page */

2015-02-26T06:34:54Z

Assigning a System Login Page

← Older revision		Revision as of 06:34, 26 February 2015
Line 18:		Line 18:
	=== Assigning a System Login Page ===		=== Assigning a System Login Page ===

	Perform the following steps to assign a system login page.		Login pages must exist on the enPortal server in the <tt>[INSTALL_HOME]/server/webapps/enportal/login_pages</tt> directory. Take a look in this directory to see the available options included with a default enPortal install:

			* (no sub-directory): classic Edge Dark login page
			* <tt>edgeLight</tt>: classic Edge Light login page
			* <tt>edgeDark_css3</tt>: new Dark login page themed using CSS for easier customization
			* <tt>edgeLight_css3</tt>: new Light login page themed using CSS for easier customization
			* <tt>edgeFlat</tt>: new Flat login page themed using CSS for easier customization

			Perform the following steps to assign a system login page:

	~~# Log in to enPortal as an administrator.~~
	# Mouse over the '''Advanced''' tab and then '''System Settings''' and click on '''System Login Page'''.		# Mouse over the '''Advanced''' tab and then '''System Settings''' and click on '''System Login Page'''.
	# In the input field, enter the subdirectory (if applicable) and the file name for the login page you would like to use. ~~The~~ relative ~~directory for this field is~~ <tt>~~[INSTALL_HOME]/server/webapps/enportal~~/login_pages/~~</tt>.{{Note\| You should keep customized login pages in the <tt>/custom~~</tt> directory. An example ~~of a value for~~ this field ~~is "~~<tt>~~custom~~/~~<i>customerName</i>/<i>loginPageName</i>~~.jsp</tt>~~"}}~~		# In the input field, enter the subdirectory (if applicable) and the file name for the login page you would like to use. This is relative to the <tt>.../login_pages/</tt> directory. So for example to use the edgeFlat login page, set this field to <tt>edgeFlat/login.jsp</tt>.
	# Click the ''Save'' button.		# Click the ''Save'' button.
	# Logout of the portal and confirm that the correct login page is displayed.		# Logout of the portal and confirm that the correct login page is displayed.

imported>Jason.nicholls: /* LDAP Authentication */

2014-10-07T12:14:26Z

LDAP Authentication

← Older revision		Revision as of 12:14, 7 October 2014
Line 83:		Line 83:
	When using external authentication via LDAP the password policy should mirror the policy defined for the LDAP system. It may be more applicable to apply this policy just to the LDAP Domain.		When using external authentication via LDAP the password policy should mirror the policy defined for the LDAP system. It may be more applicable to apply this policy just to the LDAP Domain.

	Refer to the [[enportal/5.5/admin/user_administration/~~enPortal_LDAP_configuration~~\|LDAP Configuration]] documentation for more information on configuring LDAP including supported features depending on the LDAP server.		Refer to the [[enportal/5.5/admin/user_administration/ldap_configuration\|LDAP Configuration]] documentation for more information on configuring LDAP including supported features depending on the LDAP server.

imported>Jason.nicholls: /* Assigning a System Password Policy */

2014-10-07T12:06:00Z

Assigning a System Password Policy

← Older revision		Revision as of 12:06, 7 October 2014
Line 78:		Line 78:
	# Click the ''Save'' button.		# Click the ''Save'' button.
	# Confirm that the correct policy is applied by changing a test user's password.		# Confirm that the correct policy is applied by changing a test user's password.

	{{Note\|In order to change password for users that are managed by ldap, you must specify a [[enportal/5.5/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Managed_Domains\|Pluggable Authenticator]] in the domains managed by this ldap and ensure the [[enportal/5.5/admin/user_administration/enPortal_LDAP_configuration#Configuring_LDAP_Repositories\|Repository URL]] starts with <tt>ldaps://</tt> and uses a secured port (default 636).<br/><br/>Additionally some ldaps like MS Active Directory and OpenLDAP requires ldap server's SSL certificate to be imported into java cert library running portal. Please read this [[enportal/5.5/admin/user_administration/enPortal_LDAP_configuration#LDAP_With_SSL\|section]] on how to set it up. Additional example for importing MS Active Directory SSL certificate into java cert lib can be found [https://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory here].<br/><br/>Currently portal is delivered with two authenticators that allowed for ldap user password changes: '''Microsoft Active Directory''' and '''OpenDS'''.}}


	=== LDAP Authentication ===		=== LDAP Authentication ===

imported>Jason.nicholls: /* LDAP and Password Policy */

2014-10-07T12:04:20Z

LDAP and Password Policy

← Older revision		Revision as of 12:04, 7 October 2014
Line 82:		Line 82:


	=== LDAP ~~and Password Policy~~ ===		=== LDAP Authentication ===
	~~<br>~~
	When the portal system is backed by an external LDAP; the password policy settings should mirror those defined in your LDAP system. In some cases you will need to configure domain specific policy rules.

	~~{{Note\|If you are not receiving Password Warnings~~ for ~~expiration in x days, then verify your~~ LDAP ~~Server supports policy controls~~. ~~Please ignore~~ this ~~note if you are using ActiveDirectory~~.}}		When using external authentication via LDAP the password policy should mirror the policy defined for the LDAP system. It may be more applicable to apply this policy just to the LDAP Domain.

	~~Add~~ the ~~following lines to server~~/~~webapps/enportal~~/~~WEB-INF~~/~~config~~/~~custom.properties if your~~ LDAP ~~Server does not support Policy controls:~~		Refer to the [[enportal/5.5/admin/user_administration/enPortal_LDAP_configuration\|LDAP Configuration]] documentation for more information on configuring LDAP including supported features depending on the LDAP server.

	~~''ldap~~.~~policyControlSupported=false''~~

imported>Jason.nicholls: /* System Login Page */

2014-10-06T09:13:55Z

System Login Page

← Older revision		Revision as of 09:13, 6 October 2014
Line 17:		Line 17:

	=== Assigning a System Login Page ===		=== Assigning a System Login Page ===
	~~<br>~~

	Perform the following steps to assign a system login page.		Perform the following steps to assign a system login page.
Line 26:		Line 25:
	# Click the ''Save'' button.		# Click the ''Save'' button.
	# Logout of the portal and confirm that the correct login page is displayed.		# Logout of the portal and confirm that the correct login page is displayed.

	~~=== How to disable 'GET' login requests ===~~
	~~<br>~~

	~~To improve security administrators may want to disable the ability to pass login information over HTTP GET requests. Perform the following steps to disable GET Login requests:~~

	~~# Edit the file: server\webapps\enportal\WEB-INF\config\custom.properties~~
	~~# Add the line: ''dispatch.loginPostOnly=true''~~
	~~# Restart the enportal process.~~

	== Look and Feel ==		== Look and Feel ==

imported>Jason.nicholls at 08:41, 6 October 2014

2014-10-06T08:41:53Z

← Older revision		Revision as of 08:41, 6 October 2014
Line 4:		Line 4:
	The system is installed with pre-defined settings for both login page and look and feel (LAF) and without a password policy in place. Through		The system is installed with pre-defined settings for both login page and look and feel (LAF) and without a password policy in place. Through
	the '''Advanced Tab''' -> '''System Settings''', administrators can assign a system login page and system LAF that will override the default out of the box settings as well as creating a system password policy.		the '''Advanced Tab''' -> '''System Settings''', administrators can assign a system login page and system LAF that will override the default out of the box settings as well as creating a system password policy.
	[[File:enportal-5.5-system-settings.png\|frame\|System Settings sub-menu]]		[[File:enportal-5.5-system-settings.png\|frame\|center\|System Settings sub-menu]]

imported>Doug yeager: /* LDAP Password Policy */

2014-09-29T17:29:20Z

LDAP Password Policy

← Older revision		Revision as of 17:29, 29 September 2014
Line 92:		Line 92:


	=== LDAP Password Policy ===		=== LDAP and Password Policy ===
	<br>		<br>
	When the portal system is backed by an external LDAP; the password policy settings should mirror those defined in your LDAP system. In some cases you will need to configure domain specific policy rules.		When the portal system is backed by an external LDAP; the password policy settings should mirror those defined in your LDAP system. In some cases you will need to configure domain specific policy rules.

imported>Doug yeager: /* LDAP Password Policy */

2014-09-29T17:28:34Z

LDAP Password Policy

← Older revision		Revision as of 17:28, 29 September 2014
Line 96:		Line 96:
	When the portal system is backed by an external LDAP; the password policy settings should mirror those defined in your LDAP system. In some cases you will need to configure domain specific policy rules.		When the portal system is backed by an external LDAP; the password policy settings should mirror those defined in your LDAP system. In some cases you will need to configure domain specific policy rules.

	{{Note\|If you are not receiving Password Warnings for expiration in x days, then verify your LDAP Server supports policy controls. }}		{{Note\|If you are not receiving Password Warnings for expiration in x days, then verify your LDAP Server supports policy controls. Please ignore this note if you are using ActiveDirectory.}}

			Add the following lines to server/webapps/enportal/WEB-INF/config/custom.properties if your LDAP Server does not support Policy controls:

			''ldap.policyControlSupported=false''