Installation
IIS Application Creation
Follow the below steps to create your IIS web application.
- Open inetmgr.exe from Start Menu > Run
- Right click on sites > Add Website…
- Enter the site name as ‘IdentityServer’ or a site name of your choosing
- Set the physical path to ‘c:\inetpub\IdentityServer’
- Change the Binding Type to ‘https’
- Enter the DNS name that you recorded earlier under the ‘Host name’ field.
- Select the SSL certificate installed on the machine for the Loome Identity
- Click on ‘OK’
- Click on ‘Application Pools’ from the left-hand menu
- Right click on the IdentityServer application pool and select ‘Advanced Settings…’
- Change ‘.NET CLR Version’ to ‘No Managed Code’
- Change ‘Load User Profile’ to true
- Select the value in ‘Identity’ and click the ellipse button
- Select ‘Custom account’, and then click the ‘Set…’ button
- Enter the ‘User name’, ‘Password’, and ‘Confirm password’ for the service account that you recorded earlier.
- Note: ‘User name’ should include the domain in either the domain\username for username@domain.local format
- Click ‘Ok’, then ‘Ok’, then ‘Ok’
- Browse to the server level of the IIS server
- Click on ‘Configuration Editor’
- Click the Section drop down and navigate to system.webServer > security > authentication > windowsAuthentication and select it.
- Check on the right-hand Action menu for the ‘Unlock Section’ link. If it is present, it means the section is locked. Click the link to unlock the section, or if it is already unlocked then no further action is required
- Click the Section drop down and navigate to system.webServer > security > authentication > anonymousAuthentication and select it.
- Check on the right-hand Action menu for the ‘Unlock Section’ link. If it is present, it means the section is locked. Click the link to unlock the section, or if it is already unlocked then no further action is required
- Click on ‘Sites’ from the left-hand menu, and then click on the Loome Identity site that you have just created
- Right click on the site and click ‘Edit Permissions’
- Click on the ‘Security’ tab in the popup window.
- Check to see if your service account is already listed under permissions.
- If so, you can skip straight to the database creation section. If not, then click the ‘Edit’ button.
- Click the ‘Add’ button.
- Enter the username of the service account configured for the Application Pool.
- Click ‘Ok’.
- Click ‘Ok’ again.
- And then click ‘Ok’ again.
Database Creation
Follow the steps below to setup the initial database and service account access.
- Open SQL Server Management Studio from the start menu
- Connect to your database instance where the database will be stored
- From the Object Explorer, right click on ‘Databases’ and select ‘New Database…’
- Enter the database name recorded earlier under ‘Database name’
- Click ‘OK’
- From the ‘Object Explorer’, expand ‘Security’ and then right click on ‘Logins’ and select ‘New Login…’
- Click on ‘Search’
- Change the ‘From this location’ to ‘Entire Directory’
- Find the service account that will you configured to run the Application Pool in IIS
- Click ‘OK’
- Click on the ‘User Mapping’ section
- Tick the box for the newly created database
- Change the ‘Default Schema’ to ‘dbo’.
- Under ‘Database role membership for database’ select ‘db_owner’
- Click ‘OK’
Deploying the Application
Follow the below steps to deploy the web application.
- Run the setup.exe included in the installer package
- Select ‘Next’ to continue
- Wait for files to extract, the application will prompt you to click ‘Next’ once completed.
- Select the IdentityServer web site (or your chosen site name)
- Select ‘Next’ to continue
- Fill out the fields listed here as per the information provided in the appendix Web Application Settings
- Click ‘Deploy’ to continue
- The installer will begin the process of deploying the application. Please wait…
- Once the installer has completed, click Finish.
- Open the website in your browser. By browsing to your IIS site URL, followed by /admin
Permissions to this site are limited to local admins as per Permissions to the Loome Identity configuration site
