Articles in this section

See more

Creating an app in Centrify portal to get credentials information

Avatar
Shira Ben-dor
  • Updated
Follow

There are 5 steps in this procedure. If you're having trouble at any stage please contact us at support@skyformation.com. 

During the different you will need to write down the following information : client id/application id, client secret/password, scope and suffix. 

The steps that you will be performing during this procedures are:

  1. Login to your Centrify Admin Portal
  2. Creating a confidential user for the app
  3. Creating a service account role for the app (with the permissions needed)
  4. Creating a new OAuth app
  5. Configuring the newly created OAuth app

Step 1: Login to your Centrify Admin Portal

  1. Log in to your Centrify Admin portal at:
    https://123456.my.centrify.com/manage 
    (Replace 123456 with your Centrify tenant ID)

         If you are already in your Centrify User Portal you could switch to the Admin Portal
         by navigating to your user name at the top right corner and select Switch to Admin Portal
         from the dropdown:

 

 

Step 2: Create a confidential user for the app

 From the lefthand side, select Core Services -> Users then click on Add User.

  1. Put a name into the Login Name field. 

    Note: Please write down the login name, as it will be used as the "Application ID" or "Client ID" during the connector onboarding process in Skyformation UI later on. This field cannot
    contain spaces. Please also write down the suffix string. This is case sensitive.

  2. Enter values into the Email Address and Display Name fields. Confidential clients do not use these values, but they are required in order to satisfy the required fields of the user form.
  3. Enter a Password (Manually or generated) aligned with the password policy requirements.
    Confirm Password fields. 

         Note: Please write down the password that you have chosen as it will be used as                         the "Application secret" during the connector onboarding process in Skyformation UI later             on.

     4. Navigate to the Status section at the bottom and enable Is OAuth confidential client.

     5. Click Create User.   

 

Step 3: Create a Service Account Role for the app

 On the lefthand side, click on Core Services -> Roles and then click Add Role:

 

 
In the Description tab, put "Service Account" as the name.
 
Move on to Members tab and click on Add:
 
 
In the next dialog search for the user created in step 2 and add it.
 Move on to Administrative Rights tab and click on Add:
 
Select Read Only System Administration and click Add.
 

Click Save to create the new role.

 

Step 4: Create a New OAuth App

  1. On the lefthand side, navigate to Apps -> Web Apps and click on Add Web Apps. 
  2. In the next Dialog, elect the Custom tab on the Add Web Apps popup.

  3. Locate OAuth2 Client in the list and click Add. This creates an OAuth2 Client for use with the Centrify APIs.

  4. Click Yes on the Add Web App popup that appears.
  5. Click Close on the Add Web Apps popup. The app configuration screen is displayed.
 

Step 5. Configure the new OAuth 2.0 Client

  1. In the app configuration screen (left side), select categories (listed below).

  2. For each category, enter the appropriate data in the fields - see below.

         Settings:

         () Application ID: Put here the same login name which you gave to the user created in
                                      step 2. Note that this value cannot contain spaces.
         () Application Name: a descriptive name for the application.

     General Usage:
 
     () Client ID Type: select Confidential
     () Issuer: the URL of the server issuing access tokens. Can be left as default.

centrify-0__1_.png

 

   Tokens:
   () Token Type: Select JwtRS256.
   () Auth Methods: Select Client Creds. 
   () Token Lifetime: specifies the duration of the initial token. Can be left for 5 hours.
   () Issue refresh tokens : Should be checked. Can be left for 365 days or change as you wish.

   

 Scope:

 Note: the user must be in a role that gives them access to the Redrock/Query api.

() Add a scope
   - Click Add.
     The following dialog opens :

() Scope Definitions: 

                     - Name - provide some name to the scope - e.g. QueryScope
                     - Allowed REST APIs - click on "add" and Type "Redrock/Query/*".

                  Click Save

Note: Please write down the name that you have given to the scope (e.g. QueryScope) which you just created as it will be used later when onboarding the connector on Skyformation UI.

 

Permissions:

     Click on Add to add the user that was created during step 2.

   Click Add.

   Click Save.

Note: The application status should now become "deployed":

Make sure that you have at hand the following information: login name (application id), password (application secret), scope and suffix. You are now ready to onboard the centrify connector on Skyformation app UI.

Related articles

Comments

0 comments

Please sign in to leave a comment.