Remote/External Authentication

• Before commencing remote authentication setup, make sure that the required Web services have been implemented and that the CAAS server is up and running.

Update Remote ACS Settings¶

System Management > ACS Settings > Authentication server: Remote (CAAS)

• Enter the ACS URL (e.g. https://yourserverip:port/acs/pa)

• Click the Apply button.

Configure CAAS Client Certificate¶

Security > CAAS Certificate

• Click the Create Certificate Request link

• On the CAAS Certificate Request page:

  • Enter the certificate details, as appropriate

  • Click the Apply button.

• Certificate Request – Copy the certificate contents or click the Download button to save the certificate request.

Sign Certificate Request¶

• Sign the Certificate Request using a Certificate Authority.

Install Certificate Request¶

Security > CAAS Certificate

• Click the Install Certificate link

• Use the Choose File button to locate and select the Signed Certificate file or click the Certificate content radio button and paste the Signed Certificate content.

• Click the Apply button.

Upload CAAS CA Certificate¶

Security > CA Certificate

• Click the Import CA Certificate link

• Select CAAS client from the Provider drop down list

• Click the Choose File button to locate and select the CA Certificate file

• Click the Import button.

Configure CAAS Server¶

Servers > CAAS Servers

• Click the Add CAAS Server link

• On the Add CAAS Server page:

  • Enter CAAS URL of the CAAS server

  • Enter a value for CAAS Connection timeout

  • Enter a value for Maximum SMS request

  • Fill the remaining fields as appropriate

  • Click the Add button.

Check CAAS Status¶

Servers > CAAS Servers

• Click the CAAS URL link

• On the Edit CAAS Server page, click the Check CAAS Status link

• On the Check CAAS Status page, ensure the message displayed indicates that CAAS is up and running.

Configure Remote Issuer¶

System Management > Issuer Management

• Find the issuer and click the Issuer Name

• If the issuer does not exist, refer to Section 4 - Issuer Group and Issuer Setup to configure issuer, license and BIN and then continue with the next step, otherwise click the Issuer Name link

• On the Issuer Details page:

  • Set Authentication server to Remote (CAAS)

  • Select the URL of the CAAS Server from the drop down list

  • Click the Apply button.

Upload Remote Custom Pages¶

Issuers > Custom Pages

• Select the Issuer or Group radio button and select from the drop down list

• Click the Upload File link

• Use the Choose File button to locate and upload the Authentication.zip file from the following path in ActiveAccess installation package: ActiveAccess/data/custompage/issuer/AnyBank_Remote

• Click the Apply button.