MFA Guides

Configuring Internet Information Services

Follow these steps to configure Internet Information Services (IIS).

  1. In the RapidIdentity Server environment, navigate to the Start Menu and access Administrative Tools.

    conf_Internet_Info_1.png
  2. Double-click Internet Information Services (IIS) Manager.

    conf_Internet_Info_2.png
  3. Navigate to the local computer and select Application Pools.

    conf_Internet_Info_3.png
  4. Right-click oneAppPool and select Advanced Settings.

    conf_Internet_Info_4.png
  5. Advanced Settings requires three focus points.

    First, click .NET CLR Version ,and select v2.0.

    conf_Internet_Info_5_1.png

    Second, scroll to Process Model and select Identity.

    Adjacent to NetworkService, click the ellipsis.

    conf_Internet_Info_5_2.png

    Select Custom Account and then click Set.

    conf_Internet_Info_5_3.png

    When the Set Credentials dialog box appears, enter the username of the RapidIdentity Service account created earlier in the Domain\username format.

    conf_Internet_Info_5_4.png

    Enter and confirm the password previously set and click OK.

    Click OK to close the Application Pool Identity dialog.

    The RapidIdentity Server Service Account is only needed when using smart cards within your environment. The Built-in account of NetworkService will work for all other authentication methods.

    Third, staying within Process Model, click Load User Profile, then select True.

    conf_Internet_Info_5_5.png

    Click OK.

  6. Minimize the IIS window. Open Control Panel and navigate to C:\Program Files\2FA.

    conf_Internet_Info_6_1.png

    Right-click ONE Server and select Properties.

    conf_Internet_Info_6_2.png
  7. The purpose of this step is to provide the Service Account with Full Control.

    Navigate to Security | Edit. and then click Add.

    conf_Internet_Info_7_1.png

    Click Advanced.

    conf_Internet_Info_7_2.png

    Click Locations…, select the Managed Service Accounts OU, and click OK.

    conf_Internet_Info_7_3.png

    Click Find Now, select the previously created Service Account, and click OK.

    conf_Internet_Info_7_4.png

    Click OK.

    conf_Internet_Info_7_5.png

    Select the Service Account, check the Full Control box, and click OK.

    conf_Internet_Info_7_6.png

    Click OK to exit the Security menu.

  8. Return to Internet Information Services (IIS) Manager, access the Start Page, and click the RapidIdentity Server in the Recent connections pane.

    conf_Internet_Info_8_1.png

    Finally, in the Actions pane, click Restart.

    conf_Internet_Info_8_2.png

    The post-installation steps for Microsoft Internet Information Services are now complete.