(active directory integration) -...
TRANSCRIPT
1
ClickView Single Sign On
(Active Directory
Integration)
Installation and User Guide
Available with ClickView Media Suites
2
Contents
What is ClickView SSO (ADI)?................................................................................................................ 3
Installation Pre Requisites....................................................................................................................... 3
Installation of Internet Information Service (IIS) 7.5 ............................................................................ 3
Installing ClickView SSO (ADI) ............................................................................................................... 7
Configuring your Group Mappings ........................................................................................................ 10
Setting up Group Access within ClickView Online ............................................................................ 10
Setting up Group Mappings within ClickView SSO (ADI) ................................................................. 11
Configuring your Login Page................................................................................................................. 13
ClickView Customer Service and Technical Support ............................................................................ 14
3
What is ClickView SSO (ADI)? ClickView Single Sign On – Active Directory Integration, also known as ClickView SSO (ADI), is a
plugin that is installed at the institution level and provides a single sign on environment to ClickView
Online with schools who have adopted Active Directory as their account management service.
Installation Pre Requisites Prior to installing the ClickView SSO (ADI), the following key Windows components are required to be
installed on a dedicated server machine to ensure the best possible user experience:
1. Internet Information Service (IIS) 7.5
2. .NET Framework 4.0 Redistributable
(http://www.microsoft.com/en-au/download/details.aspx?id=17718)
3. The Server must be joined to a Windows 2000 or higher Domain Network
Installation of Internet Information Service (IIS) 7.5 Internet Information Service (IIS) plays an integral part in the operation of the ClickView SSO (ADI). In
this guide we will go through the IIS features needed to for the ClickView SSO (ADI) to run optimally.
1. Click Start -> All Programs -> Administrative Tools -> Server Manager.
Figure 1: Server Manager
4
2. In the Server Manager window, scroll down to Roles Summary, and then click Add Roles.
Select Web Server (IIS) and click Next
Figure 2: Select Server Roles
3. Select the IIS services to be installed on the Select Role Services page. Add only the
modules necessary. For ClickView SSO (ADI) to function please select the following services
(This includes the default features):
a. Common HTTP Features
Static Content
Default Document
Directory Browsing
HTTP Errors
HTTP Redirection
b. Application Development
ASP.NET
.NET Extensibility
ASP
ISAPI Extensions
ISAPI Filters
c. Health and Diagnostics
HTTP Logging
Request Monitor
d. Security – Select all subsections
e. Performance
Static Content Compression
Dynamic Content Compression
f. Management Tools
IIS Management Console
5
4. Once the above roles have been selected click Next to confirm the components to be
installed. Click Next and the IIS Configuration will begin.
Figure 4: Confirm Installation Selections
Figure 3: Select Role Services
6
5. When the installation is complete you will be presented with an installation summary. Click
Close.
Figure 5: IIS Installation Complete
Prior to installing the ClickView Single Sign On Active Directory Connector we need to delete the
Default Website that was created during the initial IIS Setup. To do this go to Start -> Administrative
Tools -> Internet Information Services (IIS) Manager. Expand the server tree until you reach
Default Website. Right Click and select Remove. Acknowledge the warning and select Yes.
7
Installing ClickView SSO (ADI) Once you have completed the pre-requisite steps you are now ready to install ClickView SSO (ADI).
To install:
1. In the event .NET Framework 4.0 is not installed on the system. You will be presented with
the following prompt to install .NET Framework 4.0. Please proceed through the steps to
install .NET Framework 4.0.
2. Once .NET Framework 4.0 is installed the ClickView SSO AD Connector Setup will begin.
Click Next on the introductory screen to get started.
8
Figure 6: Installer Welcome
3. Read and Accept the enclosed Software End User License Agreement (EULA). Click Next
once completed.
4. Enter the Website Name you would like to use for your SSO Login Page. This will be the
hostname attached to the IIS Binding of the site. Click Next once completed. If defining a
FQDN please ensure to make the necessary A Record changes within your DNS.
Figure 7: IIS Settings
5. Enter the necessary information as requested on the following screen. This information will be
used to setup your IIS Application pool that will host the SSO site. For the Custom Account
please enter a username that has network access above the Guest level and their
associated password.
Figure 8: IIS Application Pool Settings
9
6. In the Active Directory Connection Settings window enter the API Key Provided by ClickView
as well as your School name as it appears on ClickView Online and your license information.
Enter the IP Address of your Active Directory Domain in the format of LDAP://<Active
Directory IP> for users to be authenticated against. Click Next once complete.
Figure 9: Active Directory Connection Settings
7. It is advisable to keep the Destination folder at the default location due to inherited
permissions. If changing the location please provide IUSR with full permissions to this
directory.
8. Click Next to being the installation process. Once this process is completed you will be
prompted to restart your server.
9. Upon restarting the server. Proceed to open a web browser window and navigate to your
server’s IP address or hostname specified during setup.
10
Configuring your Group Mappings ClickView Online uses Year Groups and Video Ratings to determine the level of content that users
have access to. ClickView Online Users can belong to any Year Group from Kindergarten to Year 12*
or be part of the Staff profile. Videos can be given a rating of E, G, PG, M, MA, R and Unrestricted*.
ClickView Online then allows you to link a Year Group to a Video Rating.
To set up the Group Mappings in the ClickView SSO (ADI), it is recommended that you first set up
your Group Access within ClickView Online.
Setting up Group Access within ClickView Online This tab allows content to be restricted to student, based upon the ‘Year Group’ they are assigned to
in the Manage Student Accounts tab. The ‘Permitted Rating’ you select for each year group will be
the maximum level of content that the particular ‘Year Group’ has access to.
The example below, a Year 7 student will have access to all videos rated E, G and PG where a Year
8 student can view all the same videos as well as those videos rated ‘M’*..
The video ratings are set from within the ClickView Library Server. If your content does not have a
rating, it will only appear for those with ‘Unrestricted’ group access.
* This will differ according to your region and the video ratings available.
11
Setting up Group Mappings within ClickView SSO (ADI) Once you have set up your ClickView Online Group Access, you can now map the ClickView Online
Year Groups to your Active Directory Groups.
1. Click on the Group Mappings tab from the front page or select Customise Group Mapping
from the top banner
2. You will be presented with the following screen
3. On the left hand side are the ClickView Online Year Groups that you should recognise from
the previous steps.
4. The corresponding dropdown options on the right hand side will be populated with your Active
Directory Groups. If your Active Directory Groups do not appear, please ensure that you have
installed and configured the ClickView SSO (ADI) correctly. If problems still persist, please
contact ClickView Technical Support.
12
5. Continue to link your Active Directory Groups with the corresponding ClickView Year Group
as seen below
6. Click Save.
7. Your Active Directory Groups are now mapped to ClickView Online Year Groups.
13
Configuring your Login Page ClickView Online users who access ClickView Online through the school network will be automatically
logged in. If a user tries to log onto ClickView Online whilst outside the school network, they will be
directed to a login page and required to log in with their network username and password.
Please Note: In order for the ClickView SSO (ADI) login system to be accessible from outside the
school network, specific firewall rules will need to be created to enable this. Some systems may
require port forwarding of HTTP/HTTPS ports to the ADI Server and/or HTTP Proxy entries created to
forward DNS requests.
Below is what the default ClickView SSO (ADI) login page looks like:
This page can be customised with your institutions logo, colours and layout. To customise this form:
1. Click on Customise Sign In on the front page, or select Customise Sign In
2. You will be presented with the login screen within a HTML editor. From here you can choose
to edit the layout visually, or edit the layout through the HTML source code.
3. Once you have finished your editing, click the Save button.
4. Your login page has own been saved.
14
ClickView Customer Service and Technical Support
Australia
Phone: (02) 9509 2600
Email: [email protected]
New Zealand
Phone: +612 9509 2600
Email: [email protected]
United Kingdom
Phone: (0870) 050 5970
Email: [email protected]
Canada
Phone: (604) 889 0006
Email: [email protected]
International
Phone: +612 9509 2600
Email: [email protected]