Install the Identity Broker

This also covers the scenario where you install these portals in the same run as installing the Identity Broker.

Use the installer for Identity Director to install the Identity Broker.

1. After starting the Identity Director installer, choose Select and install components and click Next.
2. At Features, select Identity Broker and any other component you want to install or update on this server.
3. Click Next followed by Install.
   If you have selected other components, these will be installed first.
   For information on those installations, please refer to Getting Started with Identity Director.

Once the Identity Broker installation starts:

4. Accept the License Agreement and click Next.
5. Specify an installation folder. By default, Identity Broker will be installed in C:\Program Files\RES\Identity Broker\. Click Next.
6. In the Configure Other Settings step, specify the Identity Broker Address. This will be the public address of the website running the Identity Broker that your users will access.
   Specify an address that:
   • can be reached by machines that access the Identity Consumers (Identity Director portals)
   • is covered by a certificate used in IIS Site Bindings for the RES site on this server.

   This can be the same address you used to Configure IIS Binding for Identity Director.

   Optionally, in this step, you can specify the Authentication Provider Hosts you want to install alongside the Identity Broker:

   • Identity BrokerActive Directory Authentication
   • Identity Broker Windows Authentication
   

   You can install one, both or neither, depending on your needs.

7. Start the installation.
8. In the Configure Database Connection step, provide the connection details for an existing database on a Microsoft SQL server. This can be an existing Identity Broker database or a new, empty database.
   • Database Server: specify the server name, IP address (<IP address>,<port>) or named instance (<server name>\<instance name>).
   • Specify if you want to Use Windows Authentication for the database connection, instead of SQL authentication.
   • Login/Password: specify the SQL login and password for the database.
     
   • Database name: specify the database name.
   • Use the Test button to make sure the provided information is correct and a connection to the database can be established.
   • Click OK to continue and Finish the installation.

   

If you will be installing an Identity Director portal in the same run as installing the Identity Broker, please see scenario 1 (above)

Use either the installer for Identity Director or the installation file you extracted from it, to install the Identity Broker. Follow the Setup Wizard and provide the requested information.

1. Accept the License Agreement and click Next.
2. Specify an installation folder. By default, Identity Broker will be installed in C:\Program Files\RES\Identity Broker\. Click Next.
3. In the Configure IIS Binding step:
   • Specify the Hostname or Fully Qualified Domain Name (FQDN) and Port for the Identity Broker.
     Example: server.mycompany.com
     Machines that access the Identity Consumers (Identity Director portals) must be able to resolve the hostname or FQDN you entered at Hostname.
   • Select an installed certificate for the SSL binding of the website. You can select from a list that is populated with computer certificates from the Personal Certificate Store. The certificate must cover the hostname or FQDN of the server on which you install RES Identity Broker.
     For testing purposes, you can use the option Generate Self-Signed Certificate.This test certificate must be installed in the Trusted Root Certification Authorities store of any machine accessing the server. We recommend you do not use self-signed certificates in a production environment.
     For more information: What types of Microsoft IIS Server Certificates can be used with RES web-portal products

     With a properly configured certificate, no security warnings appear when you visit the Identity Broker website. However, some web browsers will always display security warnings when you use a self-signed certificate.

   If the RES site already exists in IIS, the Configure IIS Binding step is skipped: the binding configuration is already in place.

4. In the Configure Other Settings step, specify the Identity Broker Address. This will be the public address of the website running the Identity Broker that your users will access.
   Example: https://server.mycompany.com
   The field is pre-filled based on what you entered at Hostname in the Configure IIS Binding step.
   If that step was skipped by the installer, specify an address that:
   • can be reached by machines that access the Identity Consumers (Identity Director portals)
   • is covered by the certificate you specified for the RES site.

   Optionally, in this step, you can specify the Authentication Provider Hosts you want to install alongside the Identity Broker:

   • Identity BrokerActive Directory Authentication (selected by default)
   • Identity Broker Windows Authentication
   You can install one, both or neither, depending on your needs.
5. Start the installation.
   
6. In the Configure Database Connection step, provide the connection details for an existing database on a Microsoft SQL server. This can be an existing Identity Broker database or a new, empty database.
   • Database Server: specify the server name, IP address (<IP address>,<port>) or named instance (<server name>\<instance name>).
   • Specify if you want to Use Windows Authentication for the database connection, instead of SQL authentication.
   • Username/Password: specify the SQL login and password for the database.
     
   • Database name: specify the database name.
   Click OK to continue and Finish the installation.