How to configure Web Data Entry External Authentication login
Article ID: KB0138598
Updated On:
| Products | Versions |
|---|---|
| Spotfire Data Science - Statistica | 14.4 |
| Spotfire Statistica - All Servers | 14.4 |
| Spotfire Statistica | 14.4 |
Description
This article provides the steps to successfully configure the Statistica Enterprise - External Authentication Option. This article covers:
- Configuring Okta
- Configuring Enterprise Manager
- Configuring data entry's web.config
Note: Okta is a certified OpenID Provider (OP).
Environment
OS: Windows
Resolution
Configure OpenID application (okta in this example)
1. Creat a new OIDC - OpenID Connect we application. For this example, we use okta:
2. Name is WebDataEntry or WebDataEntryLogin:
3. Gather the Client ID and Client Secret:
4. In the same sheet, configure the login redirects, like below:
5. Set the Federation Broker Mode as Disabled:
6. Configure the Toek Credentials with the below settings:
7. Create an Authentication policy with Password Only and click Save:
**See the note at the bottom of this section for information about two-factor authentication
8. Add an application to the policy and click Done:
9. Create a group for the data entry users:
10. Assign people to the group:
11. Assign the WebDataEntry application to the DE_groups:
Note: For two-factor authentication, configure Password+Another factor in Authentication Policy>>Rules, and configure the Okta Verify options: https://help.okta.com/oie/en-us/content/topics/identity-engine/authenticators/configure-okta-verify-options.htm
**This will require both password and a verified device to the Okta portal, along with the installation of the Okta app on a mobile device.
Configure Enterprise Manager
a. Create new External Authentication Configuration with appropiate settings. Configure with Okta information.
Configure web.config
1. Open the data entry web.config file in a text editor. The location is typically C:\WebStatisticaPub\DataEntry:
2. Save the web.config file
3. Restart IIS by opening an admin command prompt and issuing the command: iisreset
Login Process
1. Open Data Entry and the External Login option should be available. Click it:
2. The redirect goes to the WebDataEntry sign for okta:
3. Only the Okta password for the user is required:
For two-factor authentcation, users will be challenged with the Password and to enter a code (or select a code) from the Okta app:
4. Note the external user is added automatically to the DE_groups in Enterprise Manager:
Issue/Introduction
How to configure Web Data Entry External Authentication login with password only
