Implementation > Electronic Signature > Using PassPort AM

Using PassPort AM with Electronic Signature

This topic explains how to use PassPort AM with Electronic Signature.

Overview

Electronic Signature can use PassPort AM to store the following:

User definition in PassPort AM repository or in an LDAP repository
Role definition
Link between users and roles

PassPort AM also provides a Single Sign On (SSO) feature. Single sign-on enables users to log in to multiple Axway products with just one user name and password. To use this feature you must enable SSO during the installation of PassPort. This means that users are not required to log in each time they access the Electronic Signature UI.

Installation

To install Electronic Signature with PassPort AM, choose the PassPort AM option in the Access Management configuration page when you are installing the Axway products. For PassPort integration, complete the following fields:

Field	Description
Hostname	Hostname of the PassPort installation
Main SSL/TLS port	SSL port of the PassPort installation
Shared Secret	The shared secret defined during PassPort installation
Use SSO	Check if you want to use Single Sign On
Component SSO port	Electronic Signature port where user will connect to SSO
Component instance	Name of the Electronic Signature instance in PassPort

Note about Update mode

You can use the Axway Installer to update the Access Management installation. However, you cannot use update mode to switch from PassPort AM mode to Electronic Signature mode or vice versa. This would cause data inconsistency in the database.

Post-Installation

After installing Electronic Signature, you have to:

Start Electronic Signature
Create admin and Signer users in PassPort
Update PassPort properties
Import users from PassPort
Manage groups of users

Starting Electronic Signature for the first time

Start Electronic Signature.

The first start of Electronic Signature automatically imports all required data into PassPort:

Resources that can be protected by permissions
Predefined privileges
Predefined roles

Basically, Electronic Signature has two resources: Payment and Administration.

Payment represents the payment files that can be signed in Electronic Signature.
Administration is related to the application pages used to administer Electronic Signature.

Two predefined privileges are defined: Sign payments and Manage administration.

Sign payments allows a user to sign, reject or validate a payment file or to initialize a bank.
Manage administration allows a user to create basic objects (bank, file format, etc.) and create rules for payments or import a user from PassPort and define a group of signers.

Two predefined roles are defined: Electronic Signature Signer and Electronic Signature Administrator.

All users assigned to Electronic Signature Signer role have Sign payments privileges. They can sign, validate or reject payments.
All users assigned to Electronic Signature Administrator role are the administrators of the application. They have Manage administration privileges.

Note: For more information about resources, predefined privileges and predefined roles, refer to the Axway PassPort documentation.

Creating Administrator and Signer users in PassPort

Log in to the PassPort UI with an administrator userID and create all the users you need for Electronic Signature. You can then assign roles to the created users. You can assign Electronic Signature Signer and Electronic Signature Administrator roles. You have to create at least one user with Electronic Signature Administrator role and one with Electronic Signature Signer role. Refer to the Axway PassPort Administration Guide for more information about creating users and assigning roles.

Note: Instead of storing user definitions in PassPort, you can use an external LDAP directory. You have to connect the LDAP directory to PassPort. Refer to the Axway PassPort Administration Guide for more information.

Updating PassPort properties

Log in to the PassPort UI with an administrator user ID.
Browse to the System properties menu.
Set the property: am.users.by.domain.query=true

Importing Signer users from PassPort

Connect to Electronic Signature with one of the administrator users you have created.
From the Administration menu, browse to the Users pane and click Add User.
Enter the userID of each signer user created in the previous step.
Assign those users to a group with Signer option.

Defining users who will receive email notifications

In Electronic Signature, some users must receive an email notification when a payment is imported but no rule matches. Those users should then correct the integration because wrong files have been generated or update the rule definition in order to take into account the new file.

From the Administration menu, browse to Group menu.
Create a new group with Administrator option.
Assign users to the group.