Administrator Guide

proxytrustid"", Issuer =~ ""^SELF AUTHORITY$"" ] =>
issue(store=""_ProxyCredentialStore"",types=(""http://schemas.microsoft.com/authorization/
claims/permit""),query=""isProxyTrustProvisioned({0})"", param=c.Value );")
Add-AdfsRelyingPartyTrust `
-Enabled $true `
-Name "$tenantRelyingPartyName" `
-MetadataUrl "$tenantRelyingPartyMetadataEndpoint" `
-EnableJWT $true `
-AllowedClientTypes None `
-ClaimsProviderName @($identityProviderName) `
-IssuanceTransformRules ([System.String]::Concat($transformationRules)) `
-IssuanceAuthorizationRules ([System.String]::Concat($issuanceRules)) `
-ImpersonationAuthorizationRules ([System.String]::Concat($impersonationRules))
How to open the management portal for administrators
You can manage and provide Windows Azure Pack IaaS services through the Windows Azure Pack management portal for administrators.
Using the Windows Azure Pack management portal for administrators, you can create plans, each of which provides some combination of
services that you oer. Tenants then subscribe to the plans that meet their needs.
If you open Internet Explorer on the Console VM, this site is already listed as Azure Pack Admin on the Favorites bar. The actual site is
https://< Prex >APA01.domain:30091.
When you try to access the site, if you have not yet replaced the self-signed certicates, you will see a page saying "There is a problem
with this website's security certicate." To bypass this, click Continue to this website (not recommended). You may have to click this
two times.
The rst time you open the site, click the X to close the New options.
How to open the management portal for tenants
Tenants can subscribe to plans and provision stand-alone VMs and VM roles through the Windows Azure Pack management portal for
tenants.
Stand-alone VMs are single unit virtual machines. VM roles are scalable service tiers consisting of one or more virtual machine instances.
If you open Internet Explorer on the Console VM, the tenant site is already listed as Azure Pack Tenant on the Favorites bar. The actual site
is https://<
Prex >ATP01.domain:30081.
When you try to access the site, if you have not yet replaced the self-signed certicates, you see a page saying "There is a problem with
this website's security certicate." To bypass this, click Continue to this website (not recommended). You may have to click this two
times.
Oering services to tenants
You can use the management portal for administrators to create various plans to which Tenants can subscribe.
Dell Hybrid Cloud System for Microsoft already includes a sample plan, named TenantPlan, that you can use to deploy a VM. The plan is
public. This means that users can view the plan in the tenant portal and subscribe to the plan. You can nd a walkthrough of how to use
this plan in the following section.
Administration 43