Administrator Guide

NOTE: To import the users using LDAPS protocol, complete the following steps:
1 Import the AD Domain Server Root Certicate into Java Key Store Manually using the keytool. For example, <C:\Program Files
\DELL\WMS\jdk1.8.0_152\jre\bin>keytool.exe> -importcert -alias "WIN-O358EA52H8H" -keystore "<C:\Program Files\DELL
\WMS\jdk1.8.0_152\jre\lib\security\cacerts>" -storepass changeit -le "Root Certicate Path"
2 Restart Tomcat service.
Conguring Active Directory Federation Services feature on
public cloud
To congure Active Directory Federation Services (ADFS) on a public cloud, do the following:
1 On the Portal Admin page, under Console Settings, click Active Directory (AD).
2 Enter the Wyse Management Suite details to ADFS. To know the location details on the ADFS server where you must upload the Wyse
Management Suite xml les, hover the mouse over the
information (i) icon.
NOTE: To download the Wyse Management Suite xml le, click the download
link.
3 Set the Wyse Management Suite rules in ADFS. To know the custom claim rule details, hover the mouse over the information (i) icon.
NOTE: To view the Wyse Management rules, click the Show WMS Rules link. You can also download the Wyse
Management Suite rules by clicking the link provided in the Wyse Management Suite Rules window.
4 To congure the ADFS details, click Add Conguration, and do the following:
NOTE
: To allow tenants to follow the ADFS conguration, upload the ADFS metadata
le.
a To upload the XML le stored on your thin client, click Load XML le.
The le is available at https://adfs.example.com/FederationMetadata/2007–06/FederationMetadata.xml.
b Enter the details of the entity ID and X.509 signing certicate in the respective boxes.
c Enter the ADFS login URL address and the ADFS logout URL address in the respective boxes.
d To enable tenants to congure Single Sign-On by using ADFS, select the Enable SSO login using ADFS check box. This feature
follows the Security Assertion and Markup Language (SAML) standard specication.
e To validate the conguration information, click Test ADFS Login. This enables tenants to test their setup before saving.
NOTE
: Tenants can activate/deactivate SSO login by using ADFS.
5 Click Save.
6 After you save the metadata le, click Update Conguration.
NOTE
:
• Tenants can log in and log out by using their AD credentials congured from their ADFS. You must ensure that the AD
users are imported to the Wyse Management Suite server. On the login page, click Sign in and enter your domain
credentials. You must provide the email address of your AD user and sign in.
• For more information about the ADFS documentation, go to Technet.microsoft.com/en-us/windowsserver/dd448613.
• After the ADFS test connection is successful, import the users using AD connector present in the remote repository.
• To import an user to the public cloud , remote repository must be installed.
Importing users to public cloud through active
directory
1 Download and install the le repository, see Accessing le repository. The repository must be installed by using the company network
and must have the access to the AD server to pull the users.
2 Register the repository to public cloud. Once registered, follow the steps mentioned on the UI to import the users to Wyse
Management Suite public cloud. You can edit the roles of the AD user after importing to Wyse Management Suite public cloud.
194
Portal administration