Video Call Recording


Steps:

 

 

  1. Disable DEMO by deleting the config\demo_mode folder (Probably already done.)


 

 

  1. Edit     /data/Quadient/InspireInteractive/tomcat/conf/web.xml

 

Find      <session-config> and add <cookie-config> section:


<session-config>

        <tracking-mode>COOKIE</tracking-mode>

        <session-timeout>30</session-timeout>

        <cookie-config>

          <http-only>true</http-only>

          <secure>true</secure>

          <name>__Secure-JSESSIONID</name>

        </cookie-config>

    </session-config>

 

 

  1. Edit     /data/Quadient/InspireInteractive/tomcat/conf/context.xml file:

Add the      following lines inside Context:

<!-- For single sign-on to work in Google Chrome™ version 80 and later -->

    <CookieProcessor sameSiteCookies="none" />

 

 

  1. Open the configuration.json file in ICM and use the full server name in the applicationUrl node, for example:


"applicationUrl" : "https://ccmpla-gruppocredem-coll.dataexpert.it/interactive/",

 

 

  1. Ask for - IdP metadata which contains the IdP certificate, entity ID, redirect URL, and the logout URL. e.g. FederationMetadata.xml. Presented in the shared Word document from Credem - SSO Metadata Endpoint .


 

 

  1. Copy it on the server (For example on path /data/Quadient/InspireInteractive/config/single-sign-on/)


 

 

  1. Change the owner of the file to the correct user 


sudo chown [email protected]:[email protected] federationmetadata.xml

 

 

  1. Generate one key pair (public and private keys) for Interactive to set up the communication with the identity provider (IdP) in which one Interactive key is used for both signing and encrypting the exchanged messages. To do so:


 

Run the Java® keytool with the following commands:

Get the path of the Java

echo $JAVA_HOME

cd /usr/lib/jvm/java-11-amazon-corretto/bin

sudo keytool -genkey -alias InteractiveSsoUat -keyalg RSA -keystore ssoInteractiveUat.jks -keysize 2048 -validity 1095 -storepass jt4vKS38Fu8ajNOP2KGZ

 

What is your first and last name?

  [Unknown]:  ccmpla-gruppocredem-coll.dataexpert.it

What is the name of your organizational unit?

  [Unknown]:  DataExpert

What is the name of your organization?

  [Unknown]:  DataExpert

What is the name of your City or Locality?

  [Unknown]:  Marnate

What is the name of your State or Province?

  [Unknown]:  Varese

What is the two-letter country code for this unit?

  [Unknown]:  IT

Is CN=ccmpla-gruppocredem-coll.dataexpert.it, OU=DataExpert, O=DataExpert, L=Marnate, ST=Varese, C=IT correct?

  [no]:  yes

 

Verify keystore password:

keytool -v -list -keystore ssoInteractiveUat.jks

 

Move keystore to the /data/Quadient/InspireInteractive/config/single-sign-on/ folder and change owner

sudo mv ssoInteractiveUat.jks /data/Quadient/InspireInteractive/config/single-sign-on/

cd /data/Quadient/InspireInteractive/config/single-sign-on/

sudo chown [email protected]:[email protected] ssoInteractiveUat.jks 

 

 

  1. Configure /data/Quadient/InspireInteractive/config/single-sign-on/sso.properties (Hashed password is the storepass)


<<sso.properties>>

Add/Edit the following section (Example file sso.properties attached):

 

authentication.use.saml2=true

authentication.saml2.uid=uid

authentication.use.saml2WithNsiLogin=true -> false per disattivare il doppio fattore di autenticazione

authentication.saml2.jks=file\:/data/Quadient/InspireInteractive/config/single-sign-on/ssoInteractiveUat.jks

authentication.saml2.storepass=jt4vKS38Fu8ajNOP2KGZ

authentication.saml2.default.key=InteractiveSsoUat

authentication.saml2.idp=file\:/data/Quadient/InspireInteractive/config/single-sign-on/IdpCredemSamlFederationMetadata_UAT.xml

authentication.saml2.loadBalancer=true

authentication.saml2.scheme=https

authentication.saml2.serverName=ccmpla-gruppocredem-coll.dataexpert.it

authentication.saml2.serverPort=443

authentication.saml2.includeServerPortInRequestURL=false

authentication.saml2.contextPath=/interactive

authentication.saml2.updateStrategy=updateCreate

authentication.saml2.mail=mail

authentication.saml2.name=fullName

authentication.saml2.groups=isMemberOf

 

 

  1. Configure /data/Quadient/InspireInteractive/config/single-sign-on/saml2-sp-config.xml


<<saml2-sp-config.xml>>

 

Edit the following lines:

 

<entity entityAlias="ccmpla-gruppocredem-coll.dataexpert.it" entityId="ccmpla-gruppocredem-coll.dataexpert.it"/>

<signingKey keyValue="InteractiveSsoUat"/>

<encryptionKey keyValue="InteractiveSsoUat"/>

<AliasKeyPasswords>

        <AliasKeyPass alias="InteractiveSsoUat" keyPass="jt4vKS38Fu8ajNOP2KGZ"/>

    </AliasKeyPasswords>

<sslClientAuthentication keyValue="InteractiveSsoUat"/>

 

 

  1. Restart the Inspire Interactive service


sudo systemctl restart InspireInteractive.service

You can verify the startup of the service via:

tail -f /data/Quadient/InspireInteractive/logs/Default.log

 

 

  1. Create groups in the ICM and company.json according to groups from IDP


For example: 00001.CCMPLA.INTERACTIVE.ACCESSO

 

 

  1. Export the federation metadata file and deliver it to the IdP or they can retrieve it by themselves using the link:



https://ccmpla-gruppocredem-coll.dataexpert.it/interactive/saml/metadata/