Problem: How to enforce secure communication between Agent and Portal Servers in ADSync Plus WebApplication?
Solution: ADSync Plus system is designed to provide a centralized web-based solution for the synchronization of identity data. With AD Connect Sync Plus identities and passwords can be synchronized between various on-premises Active Directories with centralized monitoring, logging, and reporting. Communication between the source (Centralized Web Portal) and destination Active Directories where ADSync Agent is installed is carried securely over the internet through SSL and HTTPS. To achieve it, the following steps are carried out:
Hub Configurations for ensuring secured connection:
- For this navigate to path: C:\Program Files\ADCS Plus Portal\Configs and open ApiConfig.xml file. See the below screenshot for clarity:
2. After opening this file, specify the InternalUri by specifying the local IPAddress of the Hub Machine. The path for the certificate pfx file along with password must be specified in this file. This should always contain the IPAddress of Hub/Portal machine and this IP should always be the local IP of the Hub Machine.
Caution: If the specified IPAddress is incorrect then ADSync Plus Windows Services will fail to start on the server.
Agent Connectivity Configurations:
- Log in as a SystemAdmin user and navigate to Security >> General Settings.
- Here specify the Hub Server Access URL which must map against the IPAddress mentioned in step 1.
Note: If the above steps are accomplished, the Agent and Hub communication will always be carried out using the secure SSL-enabled connection.
For any further queries or concern regarding the instructions in this knowledge-based article feel free to write to support@hostingcontroller.com