Configuring the ALIM Website for IMS

Configuring WSG for IMS

Configuring AssetWise for IMS

Follow these steps to configure AssetWise for IMS.

1. On the AssetWise server, open the IMS Management for your AssetWise community.
2. On the IMS Settings tab, edit the Active STS URI if needed.
   Note: If the Active STS URI is changed, the eB Index Listener Service will need to be restarted.
3. If previously connected, you might need to run this PowerShell script on the server:

   $virtualDirectory = "C:\inetpub\wwwroot\eBIMS"
   $winTemp = "C:\Windows\Temp"
   $fileName = "IMS.FederationMetadata.cache"
   
   $dirs = @()
   $dirs += $virtualDirectory
   $dirs += $winTemp
   
   # user temp folders
   Get-ChildItem("C:\Users") | ?{ $_.PSIsContainer } | % {$dirs += (join-path $_.PSPath "AppData\Local\Temp")}
   
   $delete = $true
   
   foreach ($dir in $dirs.GetEnumerator()) 
   {
       $file = (join-path $dir $fileName)
       if(Test-Path $file)
       {
           Write-Host "[$($file)] exists" -f Green
   
           if($delete) 
           {
               Write-Host "Deleting [$($file)]" -f Red
               Remove-Item $file
           }
       }
       else 
       {
           Write-Host "[$($file)] doesn't exist" -f Yellow
       }
   }

4. If you are using an issuer other than ims.bentley.com, update eB.Application.Director.exe.config in the AssetWise Director directory (the default location is C:\Program Files (x86)\Bentley\eB\Director). For example, if you are using the ims.mydomain.com, the key value would look like this:

   <add key="Bentley.eB.ImsRoot" value="https://ims.mydomain.com/"/>
   <add key="Bentley.eB.StsIssuerName" value="https://ims.mydomain.com/"/>
   <add key="Bentley.eB.StsFederationMetadataUri" value="FederationMetadata/20070-06/FederationMetadata.xml"
   <add key="Bentley.eB.StsIssuerCertificate" value="[STS Issuer Certificate hash]"/>

5. In case there is a different issuer, the Eb Service Manager properties must also be updated as follows:
   1. Open AssetWise System Management Console, and then in the Explorer, select your server from the tree.
   2. Select File, then Properties.
      The Eb Service Manager Properties dialog appears. For example,

      
   3. On the General tab, update the following properties as identified in the keys added in Step 4:

      - IMS Server URI

      - Relying Party URI

      - IMS Metadata URI

      - IMS Issuer Name

      - IMS Certificate Thumbprint

   4. Restart the Eb Service Manager Windows service.
6. To configure the database to allow user-creation in AssetWise Director for a different IMS Issuer, run the following script based on your installation type:
   Note: Replace all instances of ims.mydomain.com with your own issuer address.

   MSSQL:

   DECLARE
   @settingId INT,
   @objectId INT,
   @oldValue NVARCHAR(2000),
   @qaImsClaims NVARCHAR(2000) = ';https://ims.mydomain.com/,http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress; https://ims.mydomain.com/,http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'
   /* update settings with qa-ims claims if they do not exist */
   SELECT @settingId = settings.setting_id, @objectId = object_id, @oldValue = value
   FROM settings
   INNER JOIN setting_defs ON setting_defs.setting_id = settings.setting_id
   AND setting_defs.code = 'UserIdentityClaimTypes'
   IF @oldValue not like '%' + @qaImsClaims + '%'
   BEGIN
   update settings
   SET value = @oldValue + @qaImsClaims
   WHERE setting_id = @settingId AND object_id = @objectId
   END
   

   Oracle:

   DECLARE
   settingId INT;
   objectId INT;
   oldValue NVARCHAR2(2000);
   qaImsClaims NVARCHAR2(2000) := ';https://ims.mydomain.com/,http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress; https://ims.mydomain.com/,http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name';
   updatedValue NVARCHAR2(2000);
   BEGIN
   /* update settings with qa-ims claims if they do not exist */
   SELECT settings.setting_id, object_id, value
   INTO settingId, objectId, oldValue
   FROM settings
   INNER JOIN setting_defs ON setting_defs.setting_id = settings.setting_id
   AND setting_defs.code = 'UserIdentityClaimTypes';
   IF NOT (oldValue like '%'||qaImsClaims||'%')
   THEN
   updatedValue := oldValue || qaImsClaims;
   update settings
   SET value = updatedValue
   WHERE settings.setting_id = settingId AND settings.object_id = objectId;
   END IF;
   END;
   /
   COMMIT;