Active Roles 7.2.1 - SPML Provider Administrator Guide

Web Server requirements

Windows Server 2008 R2

On a Windows Server 2008 R2 based computer, ensure that the Web Server (IIS) server role with the following role services is installed:

• Web Server/Common HTTP Features/
  • Static Content
  • Default Document
  • HTTP Errors
  • HTTP Redirection
• Web Server/Application Development/
  • ASP.NET
  • .NET Extensibility
  • ASP
  • ISAPI Extensions
  • ISAPI Filters
• Web Server/Security/
  • Basic Authentication
  • Windows Authentication
  • Request Filtering
• Management Tools/IIS 6 Management Compatibility/
  • IIS 6 Metabase Compatibility

Use Server Manager to add the required role, role services, and features.

Windows Server 2012

On a Windows Server 2012 or Windows Server 2012 R2 based computer, ensure that the Web Server (IIS) sever role is installed, including:

• Web Server/Common HTTP Features/
  • Default Document
  • HTTP Errors
  • Static Content
  • HTTP Redirection
• Web Server/Security/
  • Request Filtering
  • Basic Authentication
  • Windows Authentication
• Web Server/Application Development/
  • .NET Extensibility 4.6
  • ASP
  • ASP.NET 4.6
  • ISAPI Extensions
  • ISAPI Filters
• Management Tools/IIS 6 Management Compatibility/
  • IIS 6 Metabase Compatibility

Windows Server 2016

On a Windows Server 2016 based computer, ensure that the Web Server (IIS) sever role is installed, including:

• Web Server/Common HTTP Features/
  • Default Document
  • HTTP Errors
  • Static Content
  • HTTP Redirection
• Web Server/Security/
  • Request Filtering
  • Basic Authentication
  • Windows Authentication
• Web Server/Application Development/
  • .NET Extensibility 4.6
  • ASP
  • ASP.NET 4.6
  • ISAPI Extensions
  • ISAPI Filters
• Management Tools/IIS 6 Management Compatibility/
  • IIS 6 Metabase Compatibility

Use Server Manager to add the required role, role services, and features.

Feature Delegation

Configure Internet Information Services (IIS) to provide Read/Write delegation for the following features:

• Handler Mappings
• Modules

Use Feature Delegation in Internet Information Services (IIS) Manager to verify that these features have delegation set to Read/Write.

Installing SPML Provider

Installing Active Roles SPML Provider

To install Active Roles SPML Provider

1. Log on to the computer on which you want to install Active Roles SPML Provider.
2. Navigate to the network location of the Active Roles SPML Provider installation files.
3. Start the Active Roles SPML Provider Installation Wizard by double-clicking Setup.exe.
4. On the Welcome page, click Next.
5. On the License Agreement page, click I accept the license agreement, and then click Next.
6. On the User Information page, enter the required user information, and then click Next.
7. On the Select Features page, optionally, click Browse to specify a new installation folder. Click Next.
8. On the Access to Active Directory page, specify how you want SPML Provider to access Active Directory. The following options are available:
   • Access through Active Roles (local Administration Service)  SPML Provider accesses Active Directory through the Active Roles Administration Service running on the computer where you install SPML Provider.
   • Access through Active Roles (specified Administration Service)  SPML Provider accesses Active Directory through the Active Roles Administration Service on a different network computer. Type the fully qualified domain name of that computer in the Administration Service on text box.
   • Direct access (local domain controller)  SPML Provider directly accesses Active Directory using domain controller running on the computer where you install SPML Provider.
   • Direct access (specified domain controller)  SPML Provider directly accesses Active Directory using domain controller running on a different network computer. Type the name of that domain controller in the Domain controller name text box.
9. On the Ready to Install the Application page, click Next to begin installation.
10. Click Finish to complete the installation.

The SPML Provider Installation Wizard creates a virtual directory under Default Web Site, with the name of the virtual directory set to ARServerSPML. This enables clients to access SPML Provider by using the following URL: http://<HostName>/ARServerSPML/SPMLProvider.asmx.

Configuring Active Roles SPML Provider

Configuring Active Roles SPML Provider

Configuration settings allow the administrator to configure SPML Provider and its schema in order to adjust the SPML Provider behavior. Administrators can, for example, specify the required managed objects and attributes in the schema, or choose the type of execution (disabling or deprovisioning objects) for the Suspend operation.

Configuration settings in SPML.Config

The SPML Provider configuration settings can be found in the SPML.Config file located in the Web sub-folder of the SPML Provider installation folder. The SPML.Config file contains data in the XML format. You can open and edit the configuration file with a common text editor such as Notepad.

The following table describes the XML elements used in the SPML Provider configuration file.