Configure the Identity Management component on the CSA node

To configure the Identity Management component on the CSA node, complete the following steps:

For load balancer:

1. Edit the following content in the CSA_HOME/jboss-as/standalone/deployments/
idm-service.war/WEB-INF/spring/applicationContext.properties file.
   Update the following values:

   • idm.csa.hostname and idm.csa.audit.hostname to [LOAD_BALANCER_HOSTNAME]
   • idm.csa.port and idm.csa.audit.port to [LOAD_BALANCER_HTTPS_PORT]

    

   idm.csa.hostname = [LOAD_BALANCER_HOSTNAME]
idm.csa.port = [LOAD_BALANCER_CSA_HTTPS_PORT]
 .
 .
 .
# Properties for CSA Auditing Server
 .
 .
 .
idm.csa.audit.hostname = [LOAD_BALANCER_HOSTNAME]"/>
idm.csa.audit.port = [LOAD_BALANCER_HTTPS_PORT]"/>

   For example:

   idm.csa.hostname = load_balancer.xyz.com
idm.csa.port = 8443
 .
 .
 .
# Properties for CSA Auditing Server
 .
 .
 .
idm.csa.audit.hostname = load_balancer.xyz.com"
idm.csa.audit.port = 8443"

2. Edit the following content in the CSA_HOME/jboss-as/standalone/deployments/
csa.war/WEB-INF/applicationContext-security.xml file.
   Update the following values:

   • hostname to [LOAD_BALANCER_HOSTNAME]
   • port to[LOAD_BALANCER_CSA_HTTPS_PORT]

   <beans:bean id="idmConfig" class="com.hp.ccue.identity.rp.IdentityServiceConfig">
   <beans:property name="protocol" value="https"/>
   <beans:property name="hostname" value="[LOAD_BALANCER_HOSTNAME]"/>
   <beans:property name="port" value="[LOAD_BALANCER_CSA_HTTPS_PORT]"/>
   <beans:property name="servicePath" value="idm-service"/> <!-- or hpcloud-idm-service if you don’t change the name of the WAR -->
   <beans:property name="integrationAcctUserName" value="idmTransportUser"/>
   <beans:property name="defaultTenant" value="#{systemEnvironment[CSA_ORG_NAME_IDENTIFIER] ?:'${csa.orgName.identifier}'}"/>
</beans:bean>

   For example:

   <beans:bean id="idmConfig" class="com.hp.ccue.identity.rp.IdentityServiceConfig">
   <beans:property name="protocol" value="https"/>
   <beans:property name="hostname" value="load_balancer.xyz.com"/>
   <beans:property name="port" value="8443"/>
   <beans:property name="servicePath" value="idm-service"/> <!-- or hpcloud-idm-service if you don’t change the name of the WAR -->
   <beans:property name="integrationAcctUserName" value="idmTransportUser"/>
   <beans:property name="defaultTenant" value="#{systemEnvironment[CSA_ORG_NAME_IDENTIFIER] ?:'${csa.orgName.identifier}'}"/>
</beans:bean>

For Apache load balancer:

1. Edit the following content in the CSA_HOME/jboss-as/standalone/deployments/
idm-service.war/WEB-INF/spring/applicationContext.properties file.
   Update the following values:

   • idm.csa.hostname and idm.csa.audit.hostname to [APACHE_LOAD_BALANCER_HOSTNAME]
   • idm.csa.port and idm.csa.audit.port to [APACHE_LOAD_BALANCER_HTTPS_PORT]

   idm.csa.hostname = [APACHE_LOAD_BALANCER_HOSTNAME]
idm.csa.port = [APACHE_LOAD_BALANCER_CSA_HTTPS_PORT]
 .
 .
 .
# Properties for CSA Auditing Server
 .
 .
 .
idm.csa.audit.hostname = [APACHE_LOAD_BALANCER_HOSTNAME]"/>
idm.csa.audit.port = [APACHE_LOAD_BALANCER_HTTPS_PORT]"/>

   For example:

   idm.csa.hostname = apache_load_balancer.xyz.com
idm.csa.port = 8443
 .
 .
 .
# Properties for CSA Auditing Server
 .
 .
 .
idm.csa.audit.hostname = apache_load_balancer.xyz.com"
idm.csa.audit.port = 8443"

2. Edit the following content in the CSA_HOME/jboss-as/standalone/deployments/
csa.war/WEB-INF/applicationContext-security.xml file. Update the following values:
   • hostname to [APACHE_LOAD_BALANCER_HOSTNAME]

   • port to [APACHE_LOAD_BALANCER_CSA_HTTPS_PORT]

     NOTE: It is not required or not mandatory in CSA 4.8 to update the above mentioned parameters such as hostname and port. These values are fetched from csa.properties file.

   <beans:bean id="idmConfig" class="com.hp.ccue.identity.rp.IdentityServiceConfig">
<beans:property name="protocol" value="#{systemEnvironment[CSA_IDM_PROVIDER_PROTOCOL]?: 'https'}"/>
<beans:property name="hostname" value="#{systemEnvironment[CSA_IDM_PROVIDER_HOSTNAME]?: '${csa.provider.hostname}'}"/>
<beans:property name="port" value="#{systemEnvironment[CSA_IDM_PROVIDER_PORT]?: ${csa.provider.port}}"/>
<beans:property name="servicePath" value="idm-service"/>
<beans:property name="integrationAcctUserName" value="idmTransportUser"/>
<beans:property name="integrationAcctPassword" value="#{systemEnvironment[CSA_SECURITY_IDM_TRANSPORT_USER_PASSWORD] == null ? '${securityIdmTransportUserPassword}' : securityHelper.decrypt(systemEnvironment[CSA_SECURITY_IDM_TRANSPORT_USER_PASSWORD])}"/>
<beans:property name="defaultTenant" value="#{systemEnvironment[CSA_ORG_NAME_IDENTIFIER] ?: '${csa.orgName.identifier}'}"/>
</beans:bean>