{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Applies to","type":"text","marks":[{"type":"strong"}]},{"text":": ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Enterprise ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Cloud (SaaS on AWS) ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos AWS Marketplace","type":"text"}]},{"type":"paragraph","content":[{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Azure Marketplace ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos GCP Marketplace ","type":"text"},{"type":"emoji","attrs":{"id":"atlassian-check_mark","text":":check_mark:","shortName":":check_mark:"}},{"text":" Kyvos Single Node Installation (Kyvos SNI) ","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Okta uses SAML 2.0 protocol to communicate with web applications (like Kyvos) for carrying on SSO. To use Okta for external authentication in Kyvos, enable SAML for the Kyvos Web application. ","type":"text"},{"type":"hardBreak"},{"text":" To know more about SAML 2.0, ","type":"text"},{"text":"click here","type":"text","marks":[{"type":"link","attrs":{"href":"http://developer.okta.com/standards/SAML/"}}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To enable SAML for Kyvos, you must have the following certificate files","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"X.509 certificate file","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Service Provider Key File","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Register the Kyvos application with your Okta account, and generate and download the following:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Single Sign-On URL ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Identity Provider Issuer ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"X.509 Certificate File","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To configure SAML2.0 as an external authentication provider for the Kyvos Web Portal, you must add the following values when creating the application in Identity Provider (IdP) for Single Sign On:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sign-in redirect URIs: ","type":"text"},{"text":"/kyvos/oauthRedirect","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sign-out redirect URIs: ","type":"text"},{"text":"/kyvos/#/master/SSOLogout","type":"text","marks":[{"type":"strong"}]}]}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"SAML configuration in Kyvos Manager","type":"text"}]},{"type":"paragraph","content":[{"text":"To configure SAML2.0 as an external authentication provider for the Kyvos Web Portal, perform the following steps. ","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"On the Kyvos Manager, navigate to ","type":"text"},{"text":"Security ","type":"text","marks":[{"type":"strong"}]},{"text":"> ","type":"text"},{"text":"Web based SSO","type":"text","marks":[{"type":"strong"}]},{"text":" page.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the ","type":"text"},{"text":"Enable External Authentication","type":"text","marks":[{"type":"strong"}]},{"text":" checkbox to define the external authentication mechanism for the Kyvos Web portal.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the SAML2.0 option from the","type":"text"},{"text":" Provider","type":"text","marks":[{"type":"strong"}]},{"text":" list.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":600,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":600,"id":"1b405a64-d5cf-48b6-9f37-f61ff0268006","collection":"contentId-314227936","type":"file","height":721},"marks":[{"type":"border","attrs":{"size":1,"color":"#091e4224"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter details as:","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

Parameter/Field	Comments/Description
Header Name	Enter the name of the HTTP header that contains the user name in the HTTP request.
Header Type	Select the type of value to be sent by the external authentication tool as an SSO token.
Error Redirection URL	Enter the URL to which the user will be redirected if there is an error in authenticating the Kyvos application with SAML2.0. This option is displayed only if SAML2.0 is selected as an external authentication provider. Both relative and absolute URLs are supported. Example: /error/exception.jsp and http://host:port/appname
Service Provider Single Sign-On Return URL	Enter the Kyvos Web Portal URL, on which the application redirects after a single sign-on.
Service Provider Issuer	Enter the name of the service provider issuer to identify your Kyvos Server installation to the Identity Provider. You can use your Kyvos Web Server URL here.
X.509 Certificate File	Upload the standard format certificate (X.509) file. This is a Privacy Enhanced Mail (PEM)-encoded x509 certificate with the .crt file extension.
Service Provider Key File	Upload the service provider's private key file. This is an RSA or DSA private key file with .key extension. This is not password protected.
Single Logout URL	Enter the identity provider's single sign-out URL.
Single Sign-On URL	Enter a single sign-on URL. This is the URL generated by SAML2.0 while integrating the Kyvos application.
Identity Provider Issuer	Enter identity provider issuer as generated by SAML2.0.
X.509 Certificate File	Upload the X.509 certificate file for SAML2.0.

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"table","attrs":{"layout":"full-width"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Parameter/Field","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Comments/Description","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Header Name","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter the name of the HTTP header that contains the user name in the HTTP request.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Header Type","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Select the type of value to be sent by the external authentication tool as an SSO token.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Error Redirection URL","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter the URL to which the user will be redirected if there is an error in authenticating the Kyvos application with SAML2.0. This option is displayed only if SAML2.0 is selected as an external authentication provider. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"type":"hardBreak"},{"text":" Both relative and absolute URLs are supported. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"type":"hardBreak"},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Example: ","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"/error/exception.jsp and ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"http://host:port/appname","type":"text","marks":[{"type":"link","attrs":{"href":"http://hostport"}},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Service Provider Single Sign-On Return URL","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter the Kyvos Web Portal URL, on which the application redirects after a single sign-on.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Service Provider Issuer","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter the name of the service provider issuer to identify your Kyvos Server installation to the Identity Provider. You can use your Kyvos Web Server URL here.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"X.509 Certificate File","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Upload the standard format certificate (X.509) file. This is a Privacy Enhanced Mail (PEM)-encoded x509 certificate with the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":".crt","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" file extension.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Service Provider Key File","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Upload the service provider's private key file. This is an RSA or DSA private key file with .key extension. This is not password protected.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Single Logout URL","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter the identity provider's single sign-out URL.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Single Sign-On URL","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter a single sign-on URL. This is the URL generated by SAML2.0 while integrating the Kyvos application.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"Identity Provider Issuer","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Enter identity provider issuer as generated by SAML2.0.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[199.92]},"content":[{"type":"paragraph","content":[{"text":"X.509 Certificate File","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[773.44]},"content":[{"type":"paragraph","content":[{"text":"Upload the X.509 certificate file for SAML2.0.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the ","type":"text"},{"text":"Save ","type":"text","marks":[{"type":"strong"}]},{"text":"button to save changes.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Verifying configuration in Kyvos Manager","type":"text"}]},{"type":"paragraph","content":[{"text":"Once the settings are saved, verify the values of these properties in the Kyvos Manager.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"For this, click Manage Kyvos  Properties. The ","type":"text"},{"text":"Properties","type":"text","marks":[{"type":"strong"}]},{"text":" page is displayed.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"kyvosclient.properties","type":"text","marks":[{"type":"strong"}]},{"text":" verify the values for the following. ","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

Property Name	Description	Value
EXT_AUTH_ENABLED	Enable/disable the access to Kyvos application using external authentication	Yes
EXT_AUTH_INSTANT_LOGIN	Enable/disable the native Kyvos login along with the external authentication	Yes
EXT_AUTH_PROVIDER	Name of the external authentication provider. Possible values: SAML2.0 and HOST_APP	SAML2.0
EXT_AUTH_HEADER_ID	In case of HOST_APP authentication, custom header will be sent against the key specified here.	username
EXT_AUTH_PARAMETER_VALUE_TYPE	Indicates what information is provided in EXT_AUTH_HEADER_ID parameter. Possible values: username, sessionid, or email.	USERNAME
EXT_AUTH_ERROR_REDIRECT_URL	In case of error in authentication, the Kyvos application will be redirected to this URL. By default, the application will be redirected to Kyvos login page.	Value given in the Error Redirection URL field.
EXT_AUTH_SIGN_OUT_REDIRECT_URL	In case of logout in authentication, the Kyvos application will be redirected to this URL. By default, the application will be redirected to Kyvos login page.	Value given in the External Authentication Sign-Out URL
EXT_AUTH_HOMEPAGE_URL	In case of integration, the external app will be redirected to this URL on session timeout. Mandatory to set this in case integration is through Kyvos session sharing mechanism.

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"table","attrs":{"layout":"wide"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Property Name","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Description","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Value","type":"text","marks":[{"type":"strong"},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_ENABLED","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"Enable/disable the access to Kyvos application using external authentication","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_INSTANT_LOGIN","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"Enable/disable the native Kyvos login along with the external authentication","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_PROVIDER","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"Name of the external authentication provider. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" Possible values: SAML2.0 and HOST_APP","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"SAML2.0","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_HEADER_ID","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"In case of HOST_APP authentication, custom header will be sent against the key specified here.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"username","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_PARAMETER_VALUE_TYPE","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"Indicates what information is provided in EXT_AUTH_HEADER_ID parameter. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" Possible values: username, sessionid, or email.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"USERNAME","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_ERROR_REDIRECT_URL","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"In case of error in authentication, the Kyvos application will be redirected to this URL. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" By default, the application will be redirected to Kyvos login page.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"Value given in the Error Redirection URL field.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_SIGN_OUT_REDIRECT_URL","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"In case of logout in authentication, the Kyvos application will be redirected to this URL. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" By default, the application will be redirected to Kyvos login page.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":"Value given in the External Authentication Sign-Out URL","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[279.48]},"content":[{"type":"paragraph","content":[{"text":"EXT_AUTH_HOMEPAGE_URL","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[334.75]},"content":[{"type":"paragraph","content":[{"text":"In case of integration, the external app will be redirected to this URL on session timeout. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":" Mandatory to set this in case integration is through Kyvos session sharing mechanism.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[204.39]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"olapengine.properties","type":"text","marks":[{"type":"strong"}]},{"text":" verify the values for the following.","type":"text"}]}]}]},{"type":"table","attrs":{"layout":"default","width":1204.0,"localId":"8ace66c9-ada0-4ee8-9b51-115b6cb8b4ca"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" Property Name ","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" Description ","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":" Value ","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"CLIENT_URL","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Defines the REST API URL for validating SSO by the BI Server.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The Kyvos web URL configured in your environment.","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}