Difference between revisions of "Common QPR Authentication"

From Mea Wiki
Jump to navigation Jump to search
(403760)
Line 2: Line 2:
 
* QPR ProcessAnalyzer Web Service
 
* QPR ProcessAnalyzer Web Service
 
* QPR ProcessAnalyzer Web Client
 
* QPR ProcessAnalyzer Web Client
−
* QPR MobileDashboard
+
* QPR UI
 
* QPR Portal
 
* QPR Portal
 
* QPR Web Services
 
* QPR Web Services
Line 19: Line 19:
  
 
#Create or change usernames in both the source and target QPR products, so that the usernames are identical in both products.
 
#Create or change usernames in both the source and target QPR products, so that the usernames are identical in both products.
−
#Configure common authentication settings by adding the URL of the product where the linking is done from to the web.config file of the target product. For example, to link between QPR ProcessAnalyzer Web Client, QPR MobileDashboard, and QPR Portal, do as follows:
+
#Configure common authentication settings by adding the URL of the product where the linking is done from to the web.config file of the target product. For example, to link between QPR ProcessAnalyzer Web Client, QPR UI, and QPR Portal, do as follows:
−
::*Add three groups, ServerGroupPA, ServerGroupMD, and ServerGroupMEA, to the web.config file under <Qpr.ProcessAnalyzer.Common.Properties.Settings> section. Specify the QPR ProcessAnalyzer service URLs for ServerGroupPA, the QPR MobileDashboard service URL(s) for ServerGroupMD, and the QPR Portal service URLs for ServerGroupMEA. See example below:
+
::*Add three groups, ServerGroupPA, ServerGroupMD, and ServerGroupMEA, to the web.config file under <Qpr.ProcessAnalyzer.Common.Properties.Settings> section. Specify the QPR ProcessAnalyzer service URLs for ServerGroupPA, the QPR UI service URL(s) for ServerGroupMD, and the QPR Portal service URLs for ServerGroupMEA. See example below:
 
<pre>
 
<pre>
 
             <setting name="ServerGroupPA" serializeAs="Xml">
 
             <setting name="ServerGroupPA" serializeAs="Xml">
Line 35: Line 35:
 
                     <ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 
                     <ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 
                         xmlns:xsd="http://www.w3.org/2001/XMLSchema">
 
                         xmlns:xsd="http://www.w3.org/2001/XMLSchema">
−
                         <string>http://mobiledashboard:8080/EnticeServices/</string>
+
                         <string>http://UI:8080/EnticeServices/</string>
 
                     </ArrayOfString>
 
                     </ArrayOfString>
 
                 </value>
 
                 </value>
Line 50: Line 50:
 
</pre>
 
</pre>
  
−
== Configuring Common Authentication for QPR MobileDashboard ==
+
== Configuring Common Authentication for QPR UI ==
  
−
There are two ways to configure common authentication for QPR MobileDashboard:
+
There are two ways to configure common authentication for QPR UI:
−
# During QPR MobileDashboard installation using the installation wizard (for instructions see step 8 in [[Installing QPR MobileDashboard]])
+
# During QPR UI installation using the installation wizard (for instructions see step 8 in [[Installing QPR UI]])
 
# After the installation to the database using SQL commands (instructions below)
 
# After the installation to the database using SQL commands (instructions below)
  
−
To configure Common Authentication for QPR MobileDashboard after the installation to the database using SQL, follow these instructions:
+
To configure Common Authentication for QPR UI after the installation to the database using SQL, follow these instructions:
 
# Determine the needed setting string. It uses following format: PRODUCTNAME,URL;PRODUCTNAME,URL;... where PRODUCTNAME is either WAS, WS or PA. Example:<br />'''<nowiki>WAS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll;WS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll/wsforward/MainService.svc/webHttp/;</nowiki>'''<br /> SERVERNAME is the name of the corresponding server.
 
# Determine the needed setting string. It uses following format: PRODUCTNAME,URL;PRODUCTNAME,URL;... where PRODUCTNAME is either WAS, WS or PA. Example:<br />'''<nowiki>WAS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll;WS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll/wsforward/MainService.svc/webHttp/;</nowiki>'''<br /> SERVERNAME is the name of the corresponding server.
−
# Login to the QPR MobileDashboard database in the SQL Server using SQL Server Management Studio.
+
# Login to the QPR UI database in the SQL Server using SQL Server Management Studio.
−
# Right click QPR MobileDashboard database, select '''New Query''', and define following query:<br />'''SELECT VALUE_FIELD FROM [DATABASENAME].[dbo].[CONFIGURATIONENTITY] WHERE KEY_FIELD ='AUTHENTICATION_SERVICES';'''<br />If the query returns a row, store the result for backup.
+
# Right click QPR UI database, select '''New Query''', and define following query:<br />'''SELECT VALUE_FIELD FROM [DATABASENAME].[dbo].[CONFIGURATIONENTITY] WHERE KEY_FIELD ='AUTHENTICATION_SERVICES';'''<br />If the query returns a row, store the result for backup.
 
# If the step 4 query didn't return anything, execute following query to make the setting change:<br />'''INSERT INTO [DATABASENAME].[dbo].[CONFIGURATIONENTITY](KEY_FIELD,VALUE_FIELD) VALUES ('AUTHENTICATION_SERVICES', 'SETTINGSTRING');'''<br />(replace the SETTINGSTRING with the one determined in step 1).
 
# If the step 4 query didn't return anything, execute following query to make the setting change:<br />'''INSERT INTO [DATABASENAME].[dbo].[CONFIGURATIONENTITY](KEY_FIELD,VALUE_FIELD) VALUES ('AUTHENTICATION_SERVICES', 'SETTINGSTRING');'''<br />(replace the SETTINGSTRING with the one determined in step 1).
 
# If the step 4 query returned a row, execute following query to make the setting change:<br />'''UPDATE [DATABASENAME].[dbo].[CONFIGURATIONENTITY] SET VALUE_FIELD = 'SETTINGSTRING' WHERE KEY_FIELD = 'AUTHENTICATION_SERVICES';'''<br />(replace the SETTINGSTRING with the one determined in step 1).
 
# If the step 4 query returned a row, execute following query to make the setting change:<br />'''UPDATE [DATABASENAME].[dbo].[CONFIGURATIONENTITY] SET VALUE_FIELD = 'SETTINGSTRING' WHERE KEY_FIELD = 'AUTHENTICATION_SERVICES';'''<br />(replace the SETTINGSTRING with the one determined in step 1).
Line 66: Line 66:
 
# In QPR server, open file '''C:\ProgramData\QPR Software\QPR 201X\201X.1\Servers\Settings\QPR_Servers.ini''' (where X is the QPR Suite version).
 
# In QPR server, open file '''C:\ProgramData\QPR Software\QPR 201X\201X.1\Servers\Settings\QPR_Servers.ini''' (where X is the QPR Suite version).
 
# In section '''[UMS Settings]''' set '''EnableSSOForPortal=1''' (if EnableSSOForPortal setting already exists, change it; if doesn't, create it as a new line).
 
# In section '''[UMS Settings]''' set '''EnableSSOForPortal=1''' (if EnableSSOForPortal setting already exists, change it; if doesn't, create it as a new line).
−
# If you need to add common authentication to QPR MobileDashboard, in section '''[WAS Settings]''' add '''<nowiki>AuthenticationService_1=ENTICE,http://SERVERNAME:8080</nowiki>''' (SERVERNAME is the name of QPR MobileDashboard server that is used when accessing QPR MobileDashboard). If you also need to add common authentication to QPR ProcessAnalyzer, add also '''<nowiki>AuthenticationService_2=PA,http://SERVERNAME</nowiki>''' as a new line. Note the increasing number in the setting name.
+
# If you need to add common authentication to QPR UI, in section '''[WAS Settings]''' add '''<nowiki>AuthenticationService_1=ENTICE,http://SERVERNAME:8080</nowiki>''' (SERVERNAME is the name of QPR UI server that is used when accessing QPR UI). If you also need to add common authentication to QPR ProcessAnalyzer, add also '''<nowiki>AuthenticationService_2=PA,http://SERVERNAME</nowiki>''' as a new line. Note the increasing number in the setting name.
 
# Restart QPR service.
 
# Restart QPR service.
 
For more information, see the detailed instructions: http://kb.qpr.com/qpr2016-1/index.html?common_qpr_authentication.htm
 
For more information, see the detailed instructions: http://kb.qpr.com/qpr2016-1/index.html?common_qpr_authentication.htm
Line 83: Line 83:
 
# In QPR Portal, open the bookmark you created in the previous step and you will see the analysis without additional authentication.
 
# In QPR Portal, open the bookmark you created in the previous step and you will see the analysis without additional authentication.
  
−
=== QPR ProcessAnalyzer in QPR MobileDashboard ===
+
=== QPR ProcessAnalyzer in QPR UI ===
−
To view an analysis created with QPR ProcessAnalyzer in QPR MobileDashboard, do as follows:
+
To view an analysis created with QPR ProcessAnalyzer in QPR UI, do as follows:
 
# In QPR ProcessAnalyzer Excel Client, open the analysis you want to view.
 
# In QPR ProcessAnalyzer Excel Client, open the analysis you want to view.
 
# To save the current analysis view as a bookmark, click the [[File:Portal Bookmarks.png|bottom]]'''Bookmark''' button, select '''New Bookmark''' and in the Bookmark Properties dialog that opens, click '''OK'''.
 
# To save the current analysis view as a bookmark, click the [[File:Portal Bookmarks.png|bottom]]'''Bookmark''' button, select '''New Bookmark''' and in the Bookmark Properties dialog that opens, click '''OK'''.
 
# Find out the '''Id''' of the bookmark you just created by opening the [[Bookmark|Bookmark Properties dialog]] for the bookmark you created and see the Id in the '''Statistics''' group of that dialog.<br/>Optionally, in [[Manage Bookmarks|Manage Bookmarks dialog]], right click a column title, select '''Column Chooser''' from the popup and drag the Id column to the table.
 
# Find out the '''Id''' of the bookmark you just created by opening the [[Bookmark|Bookmark Properties dialog]] for the bookmark you created and see the Id in the '''Statistics''' group of that dialog.<br/>Optionally, in [[Manage Bookmarks|Manage Bookmarks dialog]], right click a column title, select '''Column Chooser''' from the popup and drag the Id column to the table.
−
# In QPR MobileDashboard, add a new External Content presentation object to the view, and define its URL as:<br/>'''<nowiki>http://<QPR ProcessAnalyzer server>/#bookmark=<bookmark id>&ui=1&XSESSION={#sys:sessionId}</nowiki>'''<br/>Do not make changes to the {#sys:sessionId} tag, just copy it exactly like it is written above.<br/>For example: <nowiki>http://pa.qpr.com/#bookmark=1&ui=1&XSESSION={#sys:sessionId}</nowiki>.<br/>Note that using the "&ui" parameter with the value "1" will open the bookmark in [[Full Screen Mode]] inside the web page it was embedded in.
+
# In QPR UI, add a new External Content presentation object to the view, and define its URL as:<br/>'''<nowiki>http://<QPR ProcessAnalyzer server>/#bookmark=<bookmark id>&ui=1&XSESSION={#sys:sessionId}</nowiki>'''<br/>Do not make changes to the {#sys:sessionId} tag, just copy it exactly like it is written above.<br/>For example: <nowiki>http://pa.qpr.com/#bookmark=1&ui=1&XSESSION={#sys:sessionId}</nowiki>.<br/>Note that using the "&ui" parameter with the value "1" will open the bookmark in [[Full Screen Mode]] inside the web page it was embedded in.
  
−
Note: you can also show tabular QPR ProcessAnalyzer analyses in QPR MobileDashboard by using the Table presentation object.
+
Note: you can also show tabular QPR ProcessAnalyzer analyses in QPR UI by using the Table presentation object.
  
−
=== QPR Portal in QPR MobileDashboard ===
+
=== QPR Portal in QPR UI ===
−
QPR Portal can be embedded into QPR MobileDashboard using [[External Content Properties|External Content]] presentation object. When setting its url ('''External Content URL''' field), add the following parameter to the url:<br />
+
QPR Portal can be embedded into QPR UI using [[External Content Properties|External Content]] presentation object. When setting its url ('''External Content URL''' field), add the following parameter to the url:<br />
 
'''&xsession={#sys:sessionId}'''
 
'''&xsession={#sys:sessionId}'''
  
Line 100: Line 100:
 
{{MDBSessionExpiration}}
 
{{MDBSessionExpiration}}
  
−
[[Category: QPR MobileDashboard]]
+
[[Category: QPR UI]]

Revision as of 06:49, 7 November 2017

Common authentication enables linking from one QPR Suite product to the other without the need of a separate login for the product that is the link target. When you are authenticated to one QPR Suite product, you are automatically authenticated all other QPR Suite products as well. It is possible to configure a common authentication between following QPR Suite products:

  • QPR ProcessAnalyzer Web Service
  • QPR ProcessAnalyzer Web Client
  • QPR UI
  • QPR Portal
  • QPR Web Services

Common authentication works in a way that if there is a valid (non expired) session existing in any of the systems, sessions for the other systems are refreshed automatically without the need to login again. If all sessions have expired, there is a need to relogin. If a session has been expired, a valid session in other system is able to renew the expired session without notifying user.

Common authentication needs to be setup for each QPR Suite product according to the instructions described in this page.

In common authentication, "username" attribute is used to match user accounts between QPR products.

Configuring Common Authentication for QPR ProcessAnalyzer

The configuration file web.config in QPR ProcessAnalyzer Service is used for registering servers belonging to the common authentication server group. The servers can then share user sessions created for users.

To set up a common authentication server group:

  1. Create or change usernames in both the source and target QPR products, so that the usernames are identical in both products.
  2. Configure common authentication settings by adding the URL of the product where the linking is done from to the web.config file of the target product. For example, to link between QPR ProcessAnalyzer Web Client, QPR UI, and QPR Portal, do as follows:
  • Add three groups, ServerGroupPA, ServerGroupMD, and ServerGroupMEA, to the web.config file under <Qpr.ProcessAnalyzer.Common.Properties.Settings> section. Specify the QPR ProcessAnalyzer service URLs for ServerGroupPA, the QPR UI service URL(s) for ServerGroupMD, and the QPR Portal service URLs for ServerGroupMEA. See example below:
            <setting name="ServerGroupPA" serializeAs="Xml">
                <value>
                    <ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                        xmlns:xsd="http://www.w3.org/2001/XMLSchema">
                        <string>http://pa1.qpr.com</string>
                        <string>http://pa2.qpr.com</string>
                    </ArrayOfString>
                </value>
            </setting>
            <setting name="ServerGroupMD" serializeAs="Xml">
                <value>
                    <ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                        xmlns:xsd="http://www.w3.org/2001/XMLSchema">
                        <string>http://UI:8080/EnticeServices/</string>
                    </ArrayOfString>
                </value>
            </setting>
            <setting name="ServerGroupMEA" serializeAs="Xml">
                <value>
                    <ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                        xmlns:xsd="http://www.w3.org/2001/XMLSchema">
                        <string>http://mea1.qpr.com/QPR/Portal/QPRIsapi.dll</string>
                        <string>http://mea2.qpr.com/QPR/Portal/QPRIsapi.dll</string>
                    </ArrayOfString>
                </value>
            </setting>

Configuring Common Authentication for QPR UI

There are two ways to configure common authentication for QPR UI:

  1. During QPR UI installation using the installation wizard (for instructions see step 8 in Installing QPR UI)
  2. After the installation to the database using SQL commands (instructions below)

To configure Common Authentication for QPR UI after the installation to the database using SQL, follow these instructions:

  1. Determine the needed setting string. It uses following format: PRODUCTNAME,URL;PRODUCTNAME,URL;... where PRODUCTNAME is either WAS, WS or PA. Example:
    WAS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll;WS,http://SERVERNAME/QPR/Portal/QPR.Isapi.dll/wsforward/MainService.svc/webHttp/;
    SERVERNAME is the name of the corresponding server.
  2. Login to the QPR UI database in the SQL Server using SQL Server Management Studio.
  3. Right click QPR UI database, select New Query, and define following query:
    SELECT VALUE_FIELD FROM [DATABASENAME].[dbo].[CONFIGURATIONENTITY] WHERE KEY_FIELD ='AUTHENTICATION_SERVICES';
    If the query returns a row, store the result for backup.
  4. If the step 4 query didn't return anything, execute following query to make the setting change:
    INSERT INTO [DATABASENAME].[dbo].[CONFIGURATIONENTITY](KEY_FIELD,VALUE_FIELD) VALUES ('AUTHENTICATION_SERVICES', 'SETTINGSTRING');
    (replace the SETTINGSTRING with the one determined in step 1).
  5. If the step 4 query returned a row, execute following query to make the setting change:
    UPDATE [DATABASENAME].[dbo].[CONFIGURATIONENTITY] SET VALUE_FIELD = 'SETTINGSTRING' WHERE KEY_FIELD = 'AUTHENTICATION_SERVICES';
    (replace the SETTINGSTRING with the one determined in step 1).

Configuring Common Authentication for QPR Portal and QPR Web Services

  1. In QPR server, open file C:\ProgramData\QPR Software\QPR 201X\201X.1\Servers\Settings\QPR_Servers.ini (where X is the QPR Suite version).
  2. In section [UMS Settings] set EnableSSOForPortal=1 (if EnableSSOForPortal setting already exists, change it; if doesn't, create it as a new line).
  3. If you need to add common authentication to QPR UI, in section [WAS Settings] add AuthenticationService_1=ENTICE,http://SERVERNAME:8080 (SERVERNAME is the name of QPR UI server that is used when accessing QPR UI). If you also need to add common authentication to QPR ProcessAnalyzer, add also AuthenticationService_2=PA,http://SERVERNAME as a new line. Note the increasing number in the setting name.
  4. Restart QPR service.

For more information, see the detailed instructions: http://kb.qpr.com/qpr2016-1/index.html?common_qpr_authentication.htm

Linking between QPR Products

Common QPR authentication enables opening links, such as QPR ProcessAnalyzer reports in QPR Portal, without additional authentication.

QPR ProcessAnalyzer in QPR Portal

To view an analysis created with QPR ProcessAnalyzer in QPR Portal, do as follows:

  1. In QPR ProcessAnalyzer Excel Client, open the analysis you want to view.
  2. To save the current analysis view as a bookmark, click the Portal Bookmarks.pngBookmark button, select New Bookmark and in the Bookmark Properties dialog that opens, click OK.
  3. Find out the Id of the bookmark you just created by opening the Bookmark Properties dialog for the bookmark you created and see the Id in the Statistics group of that dialog.
    Optionally, in Manage Bookmarks dialog, right click a column title, select Column Chooser from the popup and drag the Id column to the table.
  4. In QPR Portal, create a new bookmark. Paste the bookmark Id to the end of a URL that is formatted as follows:
    http://<QPR ProcessAnalyzer server>/#bookmark=<bookmark id>&ui=1&XSESSION={#sys:sessionId}
    Do not make changes to the {#sys:sessionId} tag, just copy it exactly like it is written above.
    For example: http://pa.qpr.com/#bookmark=1&ui=1&XSESSION={#sys:sessionId}.
    Note that using the "&ui" parameter with the value "1" will open the bookmark in Full Screen Mode inside the web page it was embedded in.
  5. In QPR Portal, open the bookmark you created in the previous step and you will see the analysis without additional authentication.

QPR ProcessAnalyzer in QPR UI

To view an analysis created with QPR ProcessAnalyzer in QPR UI, do as follows:

  1. In QPR ProcessAnalyzer Excel Client, open the analysis you want to view.
  2. To save the current analysis view as a bookmark, click the Portal Bookmarks.pngBookmark button, select New Bookmark and in the Bookmark Properties dialog that opens, click OK.
  3. Find out the Id of the bookmark you just created by opening the Bookmark Properties dialog for the bookmark you created and see the Id in the Statistics group of that dialog.
    Optionally, in Manage Bookmarks dialog, right click a column title, select Column Chooser from the popup and drag the Id column to the table.
  4. In QPR UI, add a new External Content presentation object to the view, and define its URL as:
    http://<QPR ProcessAnalyzer server>/#bookmark=<bookmark id>&ui=1&XSESSION={#sys:sessionId}
    Do not make changes to the {#sys:sessionId} tag, just copy it exactly like it is written above.
    For example: http://pa.qpr.com/#bookmark=1&ui=1&XSESSION={#sys:sessionId}.
    Note that using the "&ui" parameter with the value "1" will open the bookmark in Full Screen Mode inside the web page it was embedded in.

Note: you can also show tabular QPR ProcessAnalyzer analyses in QPR UI by using the Table presentation object.

QPR Portal in QPR UI

QPR Portal can be embedded into QPR UI using External Content presentation object. When setting its url (External Content URL field), add the following parameter to the url:
&xsession={#sys:sessionId}

When the session id is passed to QPR Portal, user is automatically authenticated to QPR Portal using the common authentication.

Template:MDBSessionExpiration

Retrieved from "https://wiki.onqpr.com/mea/index.php?title=Common_QPR_Authentication&oldid=6538"