Global resource settings in Digital Access

This article is valid for Smart ID 20.11 and later.

This article describes how to make global settings for resources in Smart ID Digital Access component.

A number of settings can be specified globally to apply to all web resources as well as tunnel resources. Global resource settings cover, for example, internal proxy settings, mapped DNS names and filters.

They are configured in the Global Resource Settings section of Manage Resource Access.

The addresses for internal proxies are used when a resource is accessed via a cache or an ordinary proxy server. You can select to use NTLM v2 for HTTP and HTTPS proxies. If you experience authentication problems you may try to uncheck the use of NTLM v2.

Proxies available for configuration are:

Internal HTTP proxy
HTTPS proxy
TCP proxy

The TCP proxy is used for the Access Client

You configure the DNS name pool for the purpose of improving link translation, and for using multiple DNS domains. Multiple DNS domains allow several customers to be hosted on the same Digital Access platform, and a single access point to serve multiple designs of logon pages as well as of the Digital Access portal. This feature is mainly useful for ASP solutions.

The registered DNS names define the pool of available DNS names. To use multiple DNS domains, you define several DNS names for the access point.

All DNS names must also be registered in a public DNS server, or written to the hosts file on the client machine that uses the system.

When a user makes a request using a registered mapped DNS name, the access point looks up which server to connect to and which protocol to use and sends the request towards this server.

In Digital Access, three methods of DNS mapping are supported:

URL mapping
The resource is mapped to a path instead of using a mapped DNS name.
Reserved DNS mapping
The resource is mapped to a specific DNS name.
Pooled DNS mapping
The resource is assigned a DNS name on first access point request towards an internal server.

You specify which method of DNS mapping to use when adding or editing a resource.

You can add filters so that specific pages or requests are filtered when accessing a resource. For each filter you need to specify for which resource it applies. The filters are written using scripts in wascr format. Click the ?-sign for a more detailed description.

To find the scripts for the filters:

In Digital Access Admin, click Browse.
To find the scripts, go to access-point/built-in-files/scripts.
You can also create your own filter. The file script_syntax.txt contains information regarding how to create scripts for filters.

Here you enter the paths to the main page for the Portal and to the welcome page displayed after a successful logon.

Here, you define trusted IP addresses, for example an HTTP proxy.

Trusted in this context means that even though a client connecting to the Access Point may not have secure connection, incoming traffic from the specified IP address and the specified port is assumed to have a specified level of security (128 bit encryption) added.

Users are not redirected to HTTPS when coming from a trusted gateway.