Overview

The SafeNet App Gateway is designed to enable integration with unauthenticated applications that don't follow standard way of communication through SAML 2.0 or OIDC protocols. Customers would benefit with availability of a generic way to integrate with their non-standard apps. With this application gateway, the users can utilise the inbuilt features of STA like two-factor authentication, adaptive access and SSO, and bring them to their native application platforms.

Please refer to STA documentation for more information about SafeNet App Gateway.

Pre-Requisites

Install Docker-Compose

• Run this command to download docker-compose

$ sudo curl -L "https://github.com/docker/compose/releases/download/1.29.1/docker-compose-$(uname -s)-$(uname -m)"-o /usr/local/bin/docker-compose

• Apply executable permissions to the binary:

$ sudo chmod +x /usr/local/bin/docker-compose

• Test the installation.

$ docker-compose –version

Accessing the Image

To load the image the 'docker pull' command should be used. The image name should be supplied with the pull command, along with a tag which corresponds to the image version number. For example:

docker pull artifactory.thalesdigital.io/docker-public/application-gateway:latest

How to use this image

Download the docker-compose.yml by using the below command:-

wget -O- "https://raw.githubusercontent.com/ThalesGroup/application-gateway/main/docker-compose.yml" > ./docker-compose.yml

docker-compose.yml for application-gateway:

  version: "3.3"

  services:

    application-gateway:

      image: "artifactory.thalesdigital.io/docker-public/application-gateway:latest"

      container_name: application-gateway

      ports:

        - "443:9443"

        - "8443:8443"

     environment:

        # Mandatory: Provide the credentials before running

        ADMIN_CONSOLE_USER:

        ADMIN_CONSOLE_PASSWORD:

     logging:

        driver: "json-file"

        options:

          max-file: "5"

          max-size: "50m"

    restart: always

The following environment variables are used for configuring login credentials for application-gateway Admin Console. These are mandatory and must be provided before running the container.

• ADMIN_CONSOLE_USER=... (mandatory)
• ADMIN_CONSOLE_PASSWORD=... (mandatory)

The default port mapping are as-

• 443:9443= serves requests from users and proxies the connection to internal services.
• 8443:8443= for configuring application-gateway(used for administrative purposes). Port 8443 should not be publicly exposed and restrict traffic to authorized networks only. Or to allow access of Application Gateway admin console only from local server, map external port number with localhost like : 127.0.0.1:8443:8443

Examine the log file of the container.

docker logs -f application-gateway, where application-gateway is container name.

Documentation

The official documentation of the SafeNet App Gateway is available at SafeNet Trusted Access (STA).