Customizable Admin and End-User UIs

customizable admin and end user uis the ics enables you to customize a variety of elements in both the admin console and the end user interface this section contains information about which elements you can customize and where you can find the appropriate configuration options you can customize the look and feel of the following user interface elements in the admin console sign in pages (default and custom) you can customize the page that administrators see when they sign into the admin console using settings in the authentication > signing in > sign in pages page using settings in this page, you can create welcome messages, sign out messages and other instructions, control page headers, customize select error messages, and create a link to a custom help page within the default system sign in page or, you can upload your own custom sign in page ui look and feel you can customize the header, background color, and logo displayed in the admin console using settings in the administrators > admin roles > select role > general > ui options page you can also use settings in this page to enable or disable the "fly out" hierarchical menus that appear when you mouse over one of the menus in the left panel of the admin console system utilization graphs you can choose which system utilization graphs to display on the opening page of the admin console using settings in the system > status > overview page you can also use settings in this page to fine tune the look and data within each of the graphs show auto allow options you can show or hide the auto allow option from yourself or other administrators who create new bookmarks for roles using settings in the maintenance > system > options page user role views you can use customization options on the users > user roles page to quickly view the settings that are associated with a specific role or set of roles user realm views you can use customization options on the users > user realms page to quickly view the settings that are associated with a specific user realm or set of user realms resource policy views you can limit which resource policies to display on any given resource policy page based on user roles for instance, you can configure the users > resource policies > web page of the admin console to only display those resource policies that are assigned to the "sales" user role you can customize these using settings in the users > resource policies > select policy type page of the admin console web resource policy views you can limit which web resource policy configuration pages to display using settings in users > resource policies > web > policy type of the admin console administrator roles you can delegate select responsibilities to other administrators using settings in the administrators > admin roles section of the admin console in doing so, you can restrict the visibility of certain options and capabilities to other administrators customizable end user interface elements overview the ics enables you to customize the look and feel of the following elements in the end user interface sign in pages (default and custom) you can customize the page that users see when they sign into the admin console using settings in the authentication > signing in > sign in pages page using settings in this page, you can create welcome messages, sign out messages and other instructions, control page headers, customize select error messages, and create a link to a custom help page within the default system sign in page or, you can upload your own custom sign in page ui look and feel you can customize the header, background color, and logo displayed in the admin console using settings in the users > user roles > select role > general > ui options page you can also use settings in this page to specify the first page the users see after they sign in, the order in which to display bookmarks, the help system to display to users, and various toolbar settings default messages and ui look and feel you can specify what the default look and feel should be for all user roles using settings in users > user roles > \[default options] pages of the admin console you can also use settings in these pages to define the default errors that users see when they try to access a blocked site, sso fails, or ssl is disabled rest support for ivanti connect secure the rest api provides a standardized method for next gen firewalls, nac devices, and third party systems to interact with ics representational state transfer (rest) or restful web services are one way of providing interoperability between computer systems on the internet rest compliant web services allow requesting systems to access and manipulate textual representations of web resources using a uniform and predefined set of stateless operations in a restful web service, requests made to a resource's uri will elicit a response that may be in xml, html, json or some other defined format ics supports json format only rest methods determine the http method for manipulating the resources defined in the service operation the kind of operations available include those predefined by the http verbs get, post, put, delete and so on the response may confirm that some alteration has been made to the stored resource, and it may provide hypertext links to other related resources or collections of resources by making use of a stateless protocol and standard operations, rest systems aim for fast performance, reliability, and the ability to grow, by re using components that can be managed and updated without affecting the system as a whole, even while it is running rest api support for ics involves only configuration apis also, ics supports only the get, post, put and delete apis authentication for rest apis basic authentication using the http authorization header is used to authenticate username/password on the administrators auth server it is expected that the user is already configured in the administrators auth server on a successful login, a random token (api key) is generated once and sent back as a json response further access to apis can use this api key in their authorization header for access ivanti recommends using api/v1/realm auth instead of api/v1/auth as it will not be supported from 22 7r2 1 release onwards update/modify your rest based scripts to make use of /api/v1/realm auth refer to realm based authentication https //help ivanti com/ps/help/en us/ics/22 x/apig/rest api soln guide/ovw\ htm# toc53640460 a new random api key is generated on a successful login the user can continue to use this key till the administrator enables/disables the user account the entire communication is over tls an example is explained below request get /api/v1/auth http/1 1 host 10 209 112 106 authorization basic ywrtaw5kyjpkyw5hmtiz content type application/json response http/1 1 200 ok cache control no store connection keep alive content type application/json expires 1 keep alive timeout=15 { "api key" "p5mmlc7rqu81r2nvsslcczhp05kf0n2onfeyelxx6au=" } authorization header for all future request should perform basic auth using above api key value as username and password as empty request get /api/v1/configuration http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 response http/1 1 200 ok content length ?283 content type ?application/json { "administrators" { "href" "/api/v1/configuration/administrators" } , "authentication" { "href" "/api/v1/configuration/authentication" } , "system" { "href" "/api/v1/configuration/system" } , "users" { "href" "/api/v1/configuration/users" } } sample get/post/put/delete request and responses below is a sample of get/post/put/delete request and responses post api call create user for existing local authentication server request post /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json { "change password at signin" "false", "console access" "false", "enabled" "true", "fullname" "user0001", "one time use" "false", "password encrypted" "3u+ur6n8agabaaaatjgr31g4nekag2hxi+wjansrrzgd6wmqvkleqv+dpqzdurqi5iwpuihjf8tnrsbv0xcqly6wgz79jv1fyzmssg==", "username" "user0001" } response 200 ok content length 122 content type application/json { "result" { "info" \[ { "message" "operation succeed without warning or error!" } ] } } representing configuration resources using links when performing a get request on a configuration resource, the json response may have "href" attributes to represent smaller resources within as an example, "get /api/v1/configuration" returns { "users" { "href" "/api/v1/configuration/users" }, "system" { "href" "/api/v1/configuration/system" }, "authentication" { "href" "/api/v1/configuration/authentication" }, "administrators" { "href" "/api/v1/configuration/administrators" } } the href values can be used to access smaller resources get api call fetch the specific user under local authentication server request get /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user/user0001 http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json response 200 ok content length 309 content type application/json { "change password at signin" "false", "console access" "false", "enabled" "true", "fullname" "user0001", "one time use" "false", "password encrypted" "3u+ur6n8agabaaaatjgr31g4nekag2hxi+wjansrrzgd6wmqvkleqv+dpqzdurqi5iwpuihjf8tnrsbv0xcqly6wgz79jv1fyzmssg==", "username" "user0001" } put api call update fullname field of specific user request put /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user/user0001/fullname http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json cache control no cache postman token 1ca1c683 4cb4 f629 53d9 cdabb9d6f092 { "fullname" "rest api test for user0001" } response 200 ok content length 122 content type application/json { "result" { "info" \[ { "message" "operation succeed without warning or error!" } ] } } after updation fetch the user details and observe the fullname field updated request get /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user/user0001 http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json response 200 ok content length ?327 content type ?application/json { "change password at signin" "false", "console access" "false", "enabled" "true", "fullname" "rest api test for user0001", "one time use" "false", "password encrypted" "3u+ur6n8agabaaaatjgr31g4nekag2hxi+wjansrrzgd6wmqvkleqv+dpqzdurqi5iwpuihjf8tnrsbv0xcqly6wgz79jv1fyzmssg==", "username" "user0001" } delete api call delete specific user request delete /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user/user0001 http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json response 200 ok content length ?122 content type ?application/json { "result" { "info" \[ { "message" "operation succeed without warning or error!" } ] } } after deleting try to fetch the resource and you would observe 404 response request get /api/v1/configuration/authentication/auth servers/auth server/sys local/local/users/user/user0001 http/1 1 host 10 209 112 106 authorization basic cdvttwxjn1jrdtgxujjodnnztendwmhqmdvrzjbomk9ormvzzuxywdzhvt06 content type application/json cache control no cache postman token c94a2f29 2b52 4ed1 3987 302cbce96a30 response 404 not found content length 105 content type application/json { "result" { "errors" \[ { "message" "resource does not exist " } ] } }