Use this guide along with the Data Tab Configuration guide to configure a Web Service (Multi-Data Store)-integrated SecureAuth IdP realm.

Web Service enables SecureAuth IdP to access multiple data stores to extract the appropriate user information for authentication and assertion.

1. Have on-premises data stores (Active Directory, SQL Server, ODBC, etc.)

2. Service accounts with read access (and optional write access) for SecureAuth IdP for each data store

1. In the Membership Connection Settings, select Web Service (Multi-Datastore) from the Data Store dropdown

2. Set the Webservice Username

It is recommended that this be changed from the default to ensure security

3. Set the Webservice Password

It is recommended that this be changed from the default to ensure security

4. Select True from the Failover dropdown if SecureAuth IdP is to respond in the event of a failure

5. Click Test Connection to ensure that the connection is successful

 

6. Click Add Realm from Local Server to use the data store integration information from a realm on the same SecureAuth IdP appliance

Click Add Realm from Another Server to use the data store integration information from a realm on a different SecureAuth IdP appliance

7. Select the realms in which the necessary data store integration is configured to be used for this realm's workflow, and click Add

8. Once realms are added, drag and drop the realms to create the order in which SecureAuth IdP will check for user information

Refer to Data Tab Configuration to complete the configuration steps in the Data tab of the Web Admin

 

9. In the FBA WebService section of the Workflow tab, select True from the Enable FBA WebService dropdown

10. Set the FBA WebService UserName and FBA WebService Password to the same values set in steps 2 - 3