{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Applies to","type":"text","marks":[{"type":"strong"}]},{"text":": ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Enterprise ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Cloud (SaaS on AWS) ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos AWS Marketplace","type":"text"}]},{"type":"paragraph","content":[{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Azure Marketplace ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos GCP Marketplace ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Single Node Installation (Kyvos SNI) ","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"There are mainly two authentication protocols for Windows Authentication, namely NTLM and Kerberos. Kerberos is the default protocol. For some Windows versions, NTLM is used instead.","type":"text"}]},{"type":"paragraph","content":[{"text":"Kyvos supports ","type":"text"},{"text":"Jespa","type":"text","marks":[{"type":"strong"}]},{"text":" third-party jar files for SSO authentication. It also works on Tomcat on Linux and supports only NTLM protocol.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"paragraph","content":[{"text":"For SSO using Windows authentication, the Windows user(s) must be imported into Kyvos.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Jespa configuration","type":"text"}]},{"type":"paragraph","content":[{"text":"To configure Jespa for Single-sign-on login to the Kyvos Manager using Admin credentials, perform the following steps.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Security ","type":"text","marks":[{"type":"strong"}]},{"text":">","type":"text"},{"text":" Kyvos Authentication","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the ","type":"text"},{"text":"Single Sign On Configuration","type":"text","marks":[{"type":"strong"}]},{"text":" checkbox and enter details as:","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

Parameter/Field	Comments/Description
Single Sign On Provider	Select the JESPA option
Bind Address	Enter the machine name where this computer account has been created.
DNS Servers IPs	Comma-separated list of DNS Server IPs.
Computer Account Name	JESPA, as an SSO provider, needs a computer account name for system authentication against the active directory.
Computer Account Password	Enter the password for the computer account name mentioned above.
jespa jar	Upload the JESPA jar file. Kyvos uses this to perform SSO using JESPA. You can download the jar from https://www.ioplex.com/downloads.php
jcifs jar	Upload the JCIFS jar file. Kyvos uses this to perform SSO using JESPA. You can download the jar from https://jcifs.samba.org/src

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"table","content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Parameter/Field","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Comments/Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Single Sign On Provider","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Select the ","type":"text"},{"text":"JESPA ","type":"text","marks":[{"type":"strong"}]},{"text":"option","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Bind Address","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Enter the machine name where this computer account has been created.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"DNS Servers IPs","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Comma-separated list of DNS Server IPs.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Computer Account Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"JESPA, as an SSO provider, needs a computer account name for system authentication against the active directory.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Computer Account Password","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Enter the password for the computer account name mentioned above.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"jespa jar","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Upload the JESPA jar file. Kyvos uses this to perform SSO using JESPA. You can download the jar from ","type":"text"},{"text":"https://www.ioplex.com/downloads.php","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.ioplex.com/downloads.php"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"jcifs jar","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Upload the JCIFS jar file. Kyvos uses this to perform SSO using JESPA. You can download the jar from ","type":"text"},{"text":"https://jcifs.samba.org/src","type":"text","marks":[{"type":"link","attrs":{"href":"https://jcifs.samba.org/src"}}]}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the ","type":"text"},{"text":"Validate JESPA Configuration ","type":"text","marks":[{"type":"strong"}]},{"text":"button to verify that the JESPA settings mentioned are correct.","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":500,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":552,"id":"f5f0f9c9-0fd3-4376-85e2-b2335e8dceff","collection":"contentId-292999865","type":"file","height":696},"marks":[{"type":"border","attrs":{"size":1,"color":"#091e4224"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Kyvos and Ecosystem ","type":"text","marks":[{"type":"strong"}]},{"text":">","type":"text"},{"text":" Properties","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"On the Properties page, in the ","type":"text"},{"text":"kyvosclient.properties","type":"text","marks":[{"type":"strong"}]},{"text":", set the value for ","type":"text"},{"text":"SYSTEM_AUTH_ENABLED","type":"text","marks":[{"type":"strong"}]},{"text":" to ","type":"text"},{"text":"YES","type":"text","marks":[{"type":"strong"}]},{"text":". This will allow users to connect to the Kyvos Web using Windows authentication.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"olapengine.properties","type":"text","marks":[{"type":"strong"}]},{"text":" file enter the ","type":"text"},{"text":"CLIENT_URL","type":"text","marks":[{"type":"strong"}]},{"text":" in the ","type":"text"},{"text":"http://tomcatUrl:port/AppName","type":"text","marks":[{"type":"strong"}]},{"text":" format.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Connecting to BI tools","type":"text"}]},{"type":"paragraph","content":[{"text":"To connect Kyvos to a third-party BI tool through SSO, use the URL as: ","type":"text"},{"text":"http://tomcatUrl:port/AppName/xmlaKyvosSSO","type":"text","marks":[{"type":"strong"}]}]}],"version":1}

Browser not supported