Prerequisites

Prerequisites for installing Identity Broker (with or without installing the Windows Authentication Provider on the same server)

The Identity Broker installation file (RES Identity Broker 10.1.0.0.msi) contains both the Identity Broker and the Windows Authentication Provider. During installation of Identity Broker, you will be prompted if you want to install the Windows Authentication Provider on the same server.

Identity Broker Prerequisites
Operating system	One of the following Microsoft Windows Server versions: 2008 R2 (with Windows PowerShell 4 installed) 2012 2012 R2 2016
Software & configuration	The server must be joined to the Microsoft Windows domain that will authenticate your users. (only required when installing the Windows Authentication Provider on the same server as the Identity Broker) One or more Active Directory Groups that can be used to manage access to the Identity Broker Management Portal. Web Server role (IIS 7 or higher) must be installed, with one of the following: SSL certificate installed in IIS Trust configuration for the self-signed certificate that can be generated during installation (for testing purposes only) Microsoft .NET Framework 4.6.1 or higher
Database	One of the following databases: Microsoft SQL Server 2008 Microsoft SQL Server 2008 R2 Microsoft SQL Server 2012 Microsoft SQL Server 2014 Microsoft SQL Server 2016 The SQL login for the database must use SQL Server Authentication.
Other	The server running the Windows Authentication Provider must be added to the Local Intranet Zone on all machines that will access RES Portals, for example using a Microsoft Group Policy Object.

For a seamless experience, configure the Microsoft Windows Security setting User Authentication > Logon as Automatic logon (the default setting for the Local Intranet Zone).
You can find this setting in the Windows Control Panel, at Internet Options, on the Security tab, under Custom Level.

Prerequisites for installing the Windows Authentication Provider separately

The Windows Authentication Provider must be installed separately, if the server you install the Identity Broker on is not joined to the Microsoft Windows domain that will authenticate your users.

Windows Authentication Provider Prerequisites
Operating system	One of the following Microsoft Windows Server versions: 2008 R2 (with Windows PowerShell 4 installed) 2012 2012 R2 2016
Software & configuration	The server must be joined to the Microsoft Windows domain that will authenticate your users Web Server role (IIS 7 or higher) must be installed, with one of the following: SSL certificate installed in IIS Trust configuration for the self-signed certificate that can be generated during installation (for testing purposes only) Microsoft .NET Framework 4.6.1 or higher
Other	An Identity Broker instance to communicate with The server running the Windows Authentication Provider must be added to the Local Intranet Zone* on all machines that will access RES Portals, for example using a Microsoft Group Policy Object

Prerequisites

See also