지금 지원 담당자와 채팅
지원 담당자와 채팅

Identity Manager 9.3 - Installation Guide

About this guide One Identity Manager overview Installation prerequisites Installing One Identity Manager Installing and configuring the One Identity Manager Service Automatic updating of One Identity Manager Updating One Identity Manager Installing additional modules for a existing One Identity Manager installation Installing and updating an application server Installing and updating an API Server Installing and updating the Manager web application Logging in to One Identity Manager tools Troubleshooting Advanced configuration of the Manager web application Machine roles and installation packages Configuration parameters for the email notification system How to configure the One Identity Manager database using SQL Server AlwaysOn availability groups

Log message for search index creation

Indexing log messages are stored in the application server log (\App_Data\Logs\AppServer.log by default).

A new indexing run usually starts after the indexing interval period specified by the Common | Indexing | Interval configuration parameter has elapsed.

If a table being indexed contains more objects to be indexed than the maximum specified by the Common | Indexing | BatchSize configuration parameter, then the indexing process for the table will stop.

A message is written to the application server log:

INFO (Indexing ): Index for Person partially updated, will continue at next run

If at least one table has not been fully indexed, then indexing will restart after three seconds. A message is written to the application server log:

INFO (Indexing ): Index is incomplete (28.06%); indexing will continue in 3000 ms

If a signal to reuse (<recycling>) the application pool has already been received, the log message will read, for example:

INFO (Indexing ): Index is incomplete (28.06%); indexing will continue when the application re-starts

As long as there is at least one incomplete table, then only the incomplete tables will be indexed during an indexing run.

Advanced configuration of the Manager web application

The configuration settings for the Manager web application are saved in the appsettings.json configuration file. You will find the appsettings.json configuration file in the web application installation directory in the Internet Information Services.

The Web Installer uses default values for the configuration settings when installing the Manager web application. You can keep these values. It is recommended you check the settings with the help of the App Configuration Editor.

Related topics

Customizing the Manager web application configuration

Use the App Configuration Editor to configure the Manager web application configuration. The App Configuration Editor is part of the web application and can be found in the Manager install directory in the WebConfigEditor subdirectory.

To run configuration

  1. Start the AppConfigurationEditor.exe file from the WebConfigEditor subdirectory of the Manager web application installation directory.

  2. In the Configuration files section, double-click the appsettings.json configuration file to open it.

  3. (Optional) To display all the configuration settings, click Show all.

  4. Modify the configuration settings.

  5. Save the changes.
Related topics

Configuration settings for the Manager web application

Use the App Configuration Editor to change the following configuration settings for the Manager web application. The settings are saved in the appsettings.json configuration file. You will find the appsettings.json configuration file in the web application installation directory in the Internet Information Services.

Table 31: Configuration settings for the Manager web application
Setting Description

General

General settings of the Manager web application

Language

The Manager web application language. The language influences how dates and numbers displayed amongst other things.

Default value: en-US

Session timeout

User's idle time in minutes after which the user is automatically logged out. This value depends on the timeout mode and directly effects memory requirements and therefore the application's performance.

Default value: 2

NOTE: This value should be set as long as required and as short as possible because orphaned sessions use memory and negatively effect the application's performance.

Timeout mode

Methods for determining timeouts. Permitted values are:

  • TimeOut: A session is ended when the period of time defined under Session timeout elapsed with no user activity.

  • HeartBeat: A session is ended when the period of time defined under Session timeout elapsed with no user activity. The user's open browser window prompts automatically and the timeout starts once the browser window closes.

Default value: HeartBeat

Database connection

Settings for connecting to the database.

Database

Database connection. Select either a direct database connection or an application server.

Program

Application which specifies the contents of the web application.

Default value: Manager

Authentication

Methods for authenticating the user when logging in to the application. For more information about authentication modules, see the One Identity Manager Authorization and Authentication Guide.

Single sign-on

Specifies whether single sign-on is used. Set this option if you user single sign-on. The application does not display a login page to the user but tries to identity the user automatically.

Security

Security settings of the Manager web application

Invalid session response delay

Time in seconds that a client sided request with false session data is blocked. This setting prevents possible "Brute force" access attempts.

Default value: 10 seconds

Close browser window after logout

Specifies whether the browser window is closed after logging out. If this setting is enabled, the application tries to close the user's browser window after logging out. This function is not supported by every browser or only when the browser prompts.

Default value: Disabled

Debugging

Settings for debugging the Manager web application.

Enable documentation mode

Specifies whether additional data is displayed in the application interface, for example, the name of the active form. The effect depends on the visualization selected.

Default value: Disabled

NOTE: This setting should not be enabled in a production environment.

Performance

Settings that affect the performance of the Manager web application.

Load balancing

The mode of integrated load balancing. Permitted values:

  • DistributeEqually: This algorithm distributes user logins such that each application in one language has the same number of active users, if possible.

  • DistributeSuccessively: This algorithm distributes user logins by order of application definition in the application pool. First of all, all user logins are forwarded to the first application in the desired language. When this has reached it maximum load, logins are forwarded to the next application.

In most cases, DistributeEqually should be selected.

Default value: DistributeEqually

Maximum workload

Maximum number of user sessions an application accepts. The application can be installed multiple times if a large number of sessions is required because system resources for each application process are limited.

Default value: 20 sessions

Force maximum workload

The value in Maximum workload is overridden is this setting is not set. However, it is used as a threshold value for the DistributeSuccessively load balancing method.

Default value: Disabled

Compress HTTP transfer

Specifies whether use of compression for HTTP communication is set.

Default value: Disabled

NOTE: Compression of HTTP communication must also be configured for Internet Information Services. For more information see the Web server documentation.

File download

Settings for downloading the Manager web application.

Enable file download

Specifies whether file download is enabled. Enable this setting to allow larger files, such as reports, to be downloaded. If file download is not set, certain functions are not available.

Default value: Enabled

Download directory

Directory for the application to use to make downloads available, such as reports generated by the application and saved by users as PDF. The application requires full permissions to this directory.

Default value: .\App_Data\Download

Cleanup interval

Time in minutes search for and remove redundant files.

Default value: 2 minutes

Supply time

Time in minutes before download is available to the user. Once a download has been initiated, the application cannot verify when and if the download was run by the user so that the download must be stopped after a set time interval.

Default value: 4 minutes

Application pool

Define all applications that work together to make the application available to users in multiple languages.

  • Click Add application to define another application.

  • Click Remove application to select an application to remove.

  • You can change the order by using the arrows on the right side.

NOTE: You must at least define the currently configured application. The order has immediately effect on login performance because the status of configured applications is queried in the defined order.

Redirect URL

Full address of the application. It must also be possible to resolve this address on the client side through the user's browser.

NOTE: Ensure correct case.

Authentication

The applications communicate with each other over the defined URL. Permissions are required to do this if anonymous access is not permitted. The application required the same permissions as required when the URL is called by browser on the server. Enter the domain, user account, and password for logging in the user account.

Plug-ins

Plug-ins extend the functionality of the Manager web application.

Auto update

Automatic update is enabled.

Default value: Enabled

Severity

Severity of a change in order to start automatic update. Permitted values:

  • Use the Common | Autoupdate configuration parameter setting

  • Noncritical change

  • Non-functional change

  • Functional change

  • Critical update

Default value: Use the Common | Autoupdate configuration parameter setting

Related topics
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택