Install Enterprise Connect Passwordless Servers
Enterprise Connect Passwordless requires you install servers on-premise.
These servers include:
-
Management Console server (MC) - An administrative console that:
-
Provides a place for configurations and the management of users and devices
-
Communicates with the authentication server
When created, it can contain its own local database or you can connect your own.
-
-
Authentication server (AS) - Deployed on the enterprise domain. It is configured to access the directory service (user store) and work with relying parties. It is configured through the MC.
-
Authentication server in DMZ (DMZ) - The Authentication Server DMZ may be required in the DMZ if there are configurations where users need authentication to services while outside the enterprise’s network, and you do not want to use a VPN connection.
In this installation option, you must have two or more Authentication Servers inside your network and at least one server in the DMZ.
-
All-in-One server (AIO) - Use the AIO server option only for proof-of-concept (POC) environments. This option installs the MC, an AS, and a database in a single installation process.
For production deployments, install the MC and AS separately. The database may be created as part of the MC installation, or it can be configured later by the administrator as the first step of the MC configuration.
|
For larger scale deployments, install each component on a separate server. Make sure to use distributed architecture where each component is installed twice on at least two servers. This supports high availability in case of failure of one of the components. |