Monday, 2 February 2015

How to setup Usher in your MicroStrategy Web& Mobile applications


Setting up Usher in your MicroStrategy applications

Here are high level steps to setup Usher in Microstrategy Web & Mobile

1.     Download and install MicroStrategy 9.5s from https://download.microstrategy.com .

2.     Create your Usher identity network from link https://go.usher.com

3.  Add your MicroStrategy users to Usher, (You must export your MicroStrategy user database as a file with comma-separated values (CSVs), which can then be added to Usher. For steps to export your users follow the steps mentioned in the following Microstrategy Link https://microstrategyhelp.atlassian.net/wiki/display/MSTR95/Exporting+your+MicroStrategy+users+for+Usher 

4.     Add your MicroStrategy applications to Usher and distribute batch to users (Follow the link for steps to add your MicroStrategy applications to Usher and badge distribution) https://microstrategyhelp.atlassian.net/wiki/display/MSTR95/Adding+MicroStrategy+users+to+Usher+and+distributing+badges

5.  Integrate MicroStrategy with Usher (Follow the link for steps to Integrate MicroStrategy with Usher https://microstrategyhelp.atlassian.net/wiki/display/MSTR95/Integrating+MicroStrategy+with+Usher

6.     Once you have completed all the steps mentioned above , follow the steps explained as mentioned below to Set up Usher in your MicroStrategy Web/Mobile

To configure Intelligence Server for Usher authentication

To set up Usher in MicroStrategy Web
  1. From the Windows Start menu, select All Programs, then MicroStrategy Tools, and click Web Administrator. The Web Administrator page opens, with a list of your Intelligence Servers.
  2. For your Intelligence Server, click Modify . The Server Properties page opens.
  3. Next to Usher Configuration, click Setup. The Usher Configuration page opens.
  4. In the Connectivity section, in the OrgID field, type the Organization ID from Usher Network Manager.
  5. In the AppID field, type the Application ID from Usher Network Manager.
6.     If you want to use Usher as a two-factor authentication system, select the Enable two-factor authentication check box. The Security token field is enabled. 
  1. In the Security token field, type the Security Token from Usher Network Manager.
  2. Click Save to save your changes. To save the Usher configuration, you are prompted for your MicroStrategy credentials. 
  3. Type your MicroStrategy username and password, and click Login. The settings are saved.
Note: The MicroStrategy system administrator account (administrator) is exempt from two-factor authentication, and does not need to provide an Usher code to log into MicroStrategy Web. It is recommended that you use a secure password for this account, and use this account for troubleshooting MicroStrategy Web.

To enable Usher authentication in MicroStrategy Web Administrator

  1. From the Windows Start menu, select All Programs, then MicroStrategy Tools, and click Web Administrator. The Web Administrator page opens.
  2. On the left, select Default Properties. The Default Server Properties page opens.
  3. In the Login area, for Trusted Authentication Request, select the Enabled check box. 
  4. From the Project List drop-down list, select Show all the projects connected to the Web Server before the user logs in
  5. From the Trusted Authentication Providers drop-down menu, select Usher
  6. Click Save to save your changes.
Your can enable additional security for MicroStrategy Web by allowing your users to log into Web using Usher in one of the following ways:
Usher as a primary authentication provider: Your users log into Web by scanning a QR code that verifies their credentials using Usher, as shown in the example below:


·         Users scan the QR code using their Usher badges, and are authenticated automatically, without entering a username and password.
Usher as a two-factor authentication method: If you use Standard authentication, your users can log into Web by providing a username, password, and a randomly generated code, as shown in the example below:
     

Users type in a randomly generated Usher code that is generated by the Usher app





To set up Usher in MicroStrategy Mobile
  1. You can enable secure access to MicroStrategy Mobile through Usher. When your users open MicroStrategy Mobile on their iOS devices, they can log into your MicroStrategy environment using their Usher badges, without needing to enter a username or password.
    You can also take advantage of advanced features, such as requiring users to access Usher using their fingerprints (on newer iOS devices), restricting access based on users' locations, and so on.

    To configure Intelligence Server for Usher authentication

    1.    From the Windows Start menu, select All Programs, then MicroStrategy Tools, and click Web Administrator. The Web Administrator page opens, with a list of your Intelligence Servers.
    2.    For your Intelligence Server, click Modify . The Server Properties page opens.
    3.    Next to Usher Configuration, click Setup. The Usher Configuration page opens.
    4.    In the Connectivity section, in the OrgID field, type the Organization ID from Usher Network Manager.
    5.    In the AppID field, type the Application ID from Usher Network Manager.
    6.    If you want to use Usher as a two-factor authentication system, select the Enable two-factor authentication check box. The Security Token field is enabled. 
    7.    In the Security Token field, type the security token from Usher Network Manager.
    8.    Click Save to save your changes. To save the Usher configuration, you are prompted for your MicroStrategy credentials. 
    9.    Type your MicroStrategy username and password, and click Login. The settings are saved.

    To enable Usher authentication in MicroStrategy Mobile Administrator

    1.    From the Windows Start menu, select All Programs, then MicroStrategy Tools, and click Mobile Administrator. The Mobile Administrator page opens.
    2.    On the left, select Default Properties. The Default Server Properties page opens.
    3.    In the Login area, for Trusted Authentication Request, select the Enabled check box. 
    4.    From the Trusted Authentication Providers drop-down menu, select Usher
    5.    Click Save to save your changes. 

    References:
    All the required information available at Microstrategy site https://microstrategyhelp.atlassian.net/wiki/display/MSTRDOCS/MicroStrategy+Help