Initial configuration of Smart ID Identity Manager (docker)

This article is valid for Smart ID 21.04 and later.

This article describes initial configuration for Smart ID Identity Manager docker installation. For Identity Manager legacy systems (WAR deployment), see Initial configuration of Identity Manager (WAR file).

<SMARTIDHOME>

In this article, <SMARTIDHOME> refers to /home/nexus, but this can be different depending on the setup.

Log in to Identity Manager Admin as a bootstrap administrator, with username admin and password admin.

Select your preferred language, see Configure language in Smart ID Identity Manager.

If a license file has not yet been uploaded, you get a message asking you to do so:

Click Choose file.
Browse for the Identity Manager Admin license file in <delivery folder>\Server\3-licences\. Click Open to view the license details.
Click Save.

If you have a ready, customer-specific configuration file in .zip format, you can now upload it.

In Identity Manager Admin, go to the Configuration File tab.
Click Upload configuration and then Select file.
Browse for the provided configuration .zip file and then click Open. The configuration is read and checked for syntax. The contents of the configuration are displayed in the popup.
Start the import by clicking Upload. When the upload is completed, close the window with Close.

The configuration file has now been uploaded.

To create users with administrative rights, follow the instruction below. Several people can be registered as administrators. It is of course important that passwords are kept secret. When you create users for administration it is necessary to allow the created administrators to see the Configuration File tab. Otherwise it is not possible for them to upload any configuration.

For each user:

Go to Home > User Administration.
If you have uploaded a configuration, all the users defined in that configuration are now displayed.
Click +New. Enter a User Name, Password, and Full user name.
Click Save + Edit. A view is displayed, that shows the available roles on the left.
Select Administrator on the left. Click the right arrow button to add the Administrator role to the new user.
Select the Permissions tab and then the General tab.
Check Configuration File. This is necessary to allow the created administrators to upload configurations.
Click Save, and close the form.

The new users will now appear in the User Administration panel.

If only one person or a few persons have administrator rights, then absence, a forgotten password or lost login credentials can lead to administrators being locked out. To avoid this, the login name and credential of an emergency administrator can be stored in a secure place to only be accessed through emergency procedures.

The procedures for managing this emergency login should be defined in the IT security policy of your organization. The double verification principle should be applied, so that no single person can log in themselves with the emergency login.