BizDataX Portal advanced settings

Additional options for BizDataX Portal are used exceptionally and as needed.

Table of contents
Managing users
User authentication
       Internet Explorer
       Google Chrome
       Firefox
Securing Portal using HTTPS
       Acquiring an SSL certificate
       Configure BizDataX Portal API
       Configure BizDataX Portal UI
       Configure BizDataX Designer

Managing users

BizDataX Portal uses Windows Authentication to authorize user access. To access the BizDataX Portal, the user has to be added in one of BizDataX user groups:

  • BizDataX Portal Admins
  • BizDataX Portal Analysts
  • BizDataX Portal Testers

To add a Windows user to a user group, open Local Users and Groups (Press 'Windows key' + R to open Run, enter lusrmgr.msc). Navigate to the Groups folder and find BizDataX Portal user groups. Add all users in appropriate groups and reboot the machine to apply changes.

BizDataX user group Description Available on BizDataX Portal
BizDataX Portal Admins Have full access to everything All
BizDataX Portal Analysts Have access to sensitive data Data sources and environments
Discovery rules
Discovery findings
Specifications
Subsetting table filters
Subset definitions
Administration
BizDataX Portal Testers Have no access to sensitive data Packages
Administration

User authentication

To avoid entering a username and password every time when starting the browser and BizDataX Portal, consider the following settings.

Internet Explorer

  • From IE, access Internet Settings via IE -> Tools -> Internet Options, or via Control Panel -> Internet Options
  • Go to the Security tab
  • Click Local intranet
  • Click Custom level...
  • Scroll right to the bottom under User Authentication / Log on and ensure that "Automatic logon with current user name and password" is checked.
  • Save changes

Google Chrome

Google Chrome actually uses the same settings that Internet Explorer uses, that is the above Control Panel -> Internet Options, so nothing more to do.

Firefox

  • Open Firefox and type about:config in the address bar
  • In the Filter field type network.automatic-ntlm-auth.trusted-uris
  • Double-click the above and enter the URLs of sites or entire domains, separated by commas
  • if your sites do no use FQDN (for example http://intranetinstead of http://intranet.domain.com), do also:
    • Set network.automatic-ntlm-auth.allow-non-fqdn to true
    • Set network.negotiate-auth.allow-non-fqdn to true

Securing Portal using HTTPS

Securing BizDataX Portal using HTTPS can be preformed manually, using this guide.

Acquiring an SSL certificate

An SSL certificate can be generally acquired in one of two ways:

  • Importing certificate signed by a certificate authority
  • Generating self-signed certificate

To generate self-signed certificate open Internet Information Services (IIS) Manager and select appropriate server connection. In the central menu navigate to IIS feature group and double click on Server Certificates feature. On the right side menu click Create Self-Signed Certificate... and input a user-friendly name such as bdxportal.ekobit.corp.

Configure BizDataX Portal API

For BizDataX Portal to work properly with HTTPS protocol API needs to be manually configured using steps provided below.

1. Internet Information Services (IIS) Manager configuration

Open Internet Information Services (IIS) Manager, select appropriate server connection and expand Sites list.

  • Select site BizDataX Portal API
  • On the right side menu, click Bindings... -> Add...
  • Set and confirm options as follows:
    • Type - HTTPS
    • Port - any port
    • SSL Certificate - previously acquired certificate
  • On the Bindings... menu select default HTTP binding and remove it
  • Click on the new HTTPS binding and select Edit...
    • Set Port to 9001, confirm and close all dialogs
  • Navigate to IIS feature group in the central menu and double click on SSL Settings feature
  • Check Require SSL checkbox

2. BizDataX Portal Web.config configuration

Locate the Web.config file in BizDataX Portal install location. Default path is C:\Inetpub\BizDataXPortal\API\Web.config. Change keys as follows:

  • Navigate to <configuration></configuration> section
    • Navigate to <appsettings></appsettings>
    • Replace
      <add key="cors:origins" value="http://localhost:9000"></add>
      
      with
      <add key="cors:origins" value="https://localhost:9000"></add>
      
    • Save and close file
    • Navigate to <system.servicemodel></system.servicemodel> -> <bindings></bindings> -> <basichttpbinding></basichttpbinding>
    • Replace
      <binding name="servicesBinding" maxbufferpoolsize="2000000000" maxbuffersize="2000000000" maxreceivedmessagesize="2000000000">
          <security mode="TransportCredentialOnly">
              <transport clientcredentialtype="Windows"></transport>
          </security>
      </binding>
      
      with
      <binding name="servicesBinding" maxbufferpoolsize="2000000000" maxbuffersize="2000000000" maxreceivedmessagesize="2000000000">
          <security mode="Transport">
              <transport clientcredentialtype="Windows"></transport>
          </security>
      </binding>
      
    • Save and close file

3. BizDataX Portal AppSettings.config configuration

Locate the AppSettings.config file in BizDataX Portal install location. Default path is C:\Inetpub\BizDataXPortal\API\AppSettings.config. Change keys as follows:

  • Navigate to <appsettings></appsettings> section
  • Replace
    <add key="PortalApiUrl" value="http://localhost:9001"></add>
    
    with
    <add key="PortalApiUrl" value="https://localhost:9001"></add>
    
  • Save and close file

Configure BizDataX Portal UI

For BizDataX Portal to work properly with HTTPS protocol UI also needs to be manually configured using steps provided below.

1. Internet Information Services (IIS) Manager configuration

Open Internet Information Services (IIS) Manager, select appropriate server connection and expand Sites list.

  • Select site BizDataX Portal UI
  • On the right side menu, click Bindings... -> Add...
  • Set and confirm options as follows:
    • Type - HTTPS
    • Port - any port
    • SSL Certificate - previously acquired certificate
  • On the Bindings... menu select default HTTP binding and remove it
  • Click on the new HTTPS binding and select Edit...
    • Set Port to 9001, confirm and close all dialogs
  • Navigate to IIS feature group in the central menu and double click on SSL Settings feature
  • Check Require SSL checkbox

2. BizDataX Portal config.production.json configuration

Locate the config.production.json file in BizDataX Portal install location. Default path is C:\Inetpub\BizDataXPortal\UI\config\config.production.json. Change keys as follows:

  • Replace
    "apiUrl": "http://localhost:9001"
    
    with
    "apiUrl": "https://localhost:9001"
    
  • Save and close file

Configure BizDataX Designer

For BizDataX Designer to work properly with BizDataX Portal its configuration needs to be manually updated as well. To configure it open Microsoft Visual Studio.

  • Select Tools -> Options -> BizDataX
  • Locate BizDataX Portal configuration group
  • Change Web API URL setting from
    http://localhost:9001
    
    to
    https://localhost:9001
    
  • Save and close dialog