IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Unable to add federation to reverse proxy

    Posted Mon July 26, 2021 07:42 AM
      |   view attached

    Hello all,

    I try setup SAML integration using from tutorial
    https://community.ibm.com/HigherLogic/System/DownloadDocumentFile.ashx?DocumentFileKey=75e1aea2-96dc-96f1-4bf9-92c32f3dd048&forceDialog=0https://community.ibm.com/HigherLogic/System/DownloadDocumentFile.ashx?DocumentFileKey=75e1aea2-96dc-96f1-4bf9-92c32f3dd048&forceDialog=0 and using docker compose script from here https://github.com/jonpharry/isamdocker

    I encounter the issue when trying to add federation to reverse proxy (page 62)

    it shows error "There is no federation associated with the runtime details. Ensure that the runtime information is correct and that your federation is configured with the runtime.".

    Can someone advice how to solve this issue?

    Thanks



    ------------------------------
    Agustino Alim
    ------------------------------


  • 2.  RE: Unable to add federation to reverse proxy

    Posted Mon July 26, 2021 09:17 AM
    Agustino,

    You will see this error if the configuration container is unable to successfully connect to the runtime container and download information about the configured federation.

    Connection information for the runtime is configured on the "Runtime" tab of the page shown in your screenshot.  It requires a hostname, port, username and password.
    When running under docker, the hostname will be the name of the runtime container - likely "isamruntime" and the port will be 443.

    The username will probably be "easuser".  The password for this user is whatever you configure for this user (should have this earlier in the cookbook).

    Note that when running under Docker, you need to take a number of steps to have configuration changes live in the runtime container.  After you have configured the easuser and configured the federation, you'll need to do the following:
    1. Deploy changes
    2. Publish snapshot
    3. Restart runtime container (if not set to auto reload on change)

    You can get information on this process in the https://ibm.biz/isamdockercookbook (albeit for configuration of context-based access rather than federation).

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------



  • 3.  RE: Unable to add federation to reverse proxy

    Posted Tue July 27, 2021 09:30 AM
    Hello Jon,

    Thank you. I manage to make it work.


    ------------------------------
    Agustino Alim
    ------------------------------