Pulse-IT App for Cantemo
Introduction
With the release of Pulse-IT Cantemo App v1.7, we've introduced enhanced sign-in capabilities between Pulse-IT and Cantemo.
This new implementation leverages SAML login and JWT token authentication, eliminating the need for users and administrators to enter their Pulse-IT username and password on Pulse-IT app. During app setup, Cantemo is configured as a Single Sign-On (SSO) Identity Provider (IDP), while Pulse-IT is set up as an SSO Service Provider (SP).
All Pulse-IT iframes within Cantemo are authenticated using SSO, and API calls from Cantemo to Pulse-IT are secured with JWT tokens.
Prerequisite:
- Cantemo 5 or above
- Pulse-IT/Automate-IT 4.0-2184 or above
- SSL encryption enabled on both Pulse-IT and Cantemo.
Installing Pulse-IT App for Cantemo
To begin the app installation, follow the same initial steps as before:
# Extract the contents of the pulse_it_for_cantemo-vX.YY.zip file
$> unzip pulse_it_for_cantemo-vX.YY.zip
# Navigate to the extracted directory
$> cd pulse_it_for_cantemo-vX.YY
# Grant executable permissions to the setup.py
$> chmod +x setup.py
# Run the setup script with administrative privileges
$> sudo ./setup.py
Configure Pulse-IT App for Cantemo
1.Register Pulse-IT Address
To complete the registration, follow these steps within the Cantemo UI:
- Navigate to System > Pulse-IT Menu.
- Enter the Pulse-IT host address in the designated field.
- Click the Test button to verify the connection.
- If the test is successful, click the Save button to save the configuration.
- Restart Cantemo to ensure all changes take effect.
sudo systemctl restart portal-web
2.Configure Pulse-IT SAML
- Retrieve Cantemo IDP Metadata: Download the Cantemo IDP Metadata XML file from
https://{cantemoHost}/pulse_it/idp/metadata
. - Enable Pulse-IT SAML: Follow the instructions in the Pulse-IT SAML documentation to enable SAML authentication for Pulse-IT.
3.Register Pulse-IT to Cantemo
To complete the configuration:
- Navigate to System > Pulse-IT > Server
- On the "System Check" section, Click the "Register" button next to "Pulse-IT registered as Service Provider".
Check configuration
Verifying System Status
Access the "System" menu, then select "Pulse-IT" and finally "Server". Ensure that all elements within the "System Check" section display a status of "OK".
Viewing User Jobs
Navigate to "Pulse-IT" and then click on "User jobs". The list of Pulse-IT user jobs should be displayed correctly.
Troubleshooting
Issue: Pulse-IT Page Not Loading on Cantemo
Possible Reason:
This issue may occur when your browser warns you about accessing a webpage using a self-signed certificate.
Resolution:
To resolve this issue, open Pulse-IT directly in the same browser and click "Proceed" to accept the browser warning.