Every One Identity Manager Service automatically works as an HTTP server. Which services the One Identity Manager Service provides depends on the plugins configurations. Use this module to specify how authentication works on an HTTP server so that other services can be accessed, for example, displaying the log file or the status display.

The following module types may be selected:

• BasicHttpAuthentication

  Use this authentication type to specify a user account for accessing the HTTP server.

  Module parameters are:

  • User account (User): User account for logging in.

  • Password (Password): User account's password.

• SessionHttpAuthentication

  Users can log in with the authentication modules that are assigned to the Job Server application and enabled.

  The users require the JobServer_Status program function.

  Table 117: Module parameters

  Parameter	Description
  Job provider ID (ProviderID)	ID of the Job provider with the connection configuration to use for logging in. This must be either a MSSQLJobProvider or an AppServerJobProvider. If this is empty the first Job provider is used.
  Application URL (AppURL)	(Optional) This option is only required if the users can log in with OAuth2 or OpenID Connect. The URL must match the value in the QBMWebApplication.BaseURL column. A OAuth2/OpenID Connect configuration is assigned to the web application. The following URL must be given in the configuration and the connected external system as the redirect URL. https://<jobserver>:<port>/login
  Cleanup after inactivity (RemoveSessionAfterInactivity)	Specifies the time period after which the session is removed from memory. The next time the session is accessed, it is reestablished transparently for the user. The default value is 00:10:00. Timeout format: hours:minutes:seconds
  Session timeout (SessionTimeout)	Specifies how long a session stays connected. After timeout expired or when the Job server is restarted, the session is ended. The default value is 1.00:00:30. Timeout format: day.hour:minutes:seconds

  For more information about authentication modules, see the One Identity Manager Authorization and Authentication Guide.

• WindowsHttpAuthentication

  Use this authentication type to specify an Active Directory group, whose users can be authenticated on the HTTP server.

  Module parameters are:

  • Group (Role): Active Directory group. A security ID (SID) or the Active Directory group name in the domain of the Job server can be specified. If the Active Directory group is not located in the domain of the Job server, the SID must be used.

  • Debug login errors (DebugLoginErrors): (Optional) User account properties and groups are written to the log file to debug login problems. Do not set this value in production environments as group assignments can be written to the log.