ADONIS 18.0 Hardware/Software Requirements

Architecture

Abstract

ADONIS Web Client	Web browser that is used to access the ADONIS web server. ADONIS supports the following desktop browsers: Microsoft Edge, Mozilla Firefox and Google Chrome on Windows and Safari on the Mac. In addition, ADONIS supports Safari on the iPad.
ADONIS Web Server	Web server (platform independent) that is necessary for the communication between web client and ADONIS application server.
ADONIS Application Server	The ADONIS application server is responsible for the access to the ADONIS database and it contains the functionality of the ADONIS web scenario. Starts one or more aworker processes.
ADONIS Database	Database server (platform independent) that manages and stores the ADONIS data. ADONIS supports Microsoft SQL Server and PostgreSQL.

Software Requirements

ADONIS Web Client

Browser (64-Bit)

Desktop Browser: Microsoft Edge (latest) on Windows Mozilla Firefox (latest) on Windows Google Chrome (latest) on Windows Safari (latest) on the Mac Mobile Browser: Safari (latest) on the iPad; graphical modelling is not supported on the iPad

Hardware Requirements

ADONIS Web Client

RAM	Minimum: 2 GB Recommended: 4 GB or higher
Processor	Minimum: Intel Pentium D / comparable processor Recommended: Intel Core i7 / comparable processor or higher
Clock speed	Minimum: 1 GHz Recommended: 2 GHz or higher
Screen resolution	Minimum: 1024 x 768 Recommended: 1366 x 768 or higher
Colour depth	Minimum: 65.536 colours / 16 Bit Recommended: 16M colours / 32 Bit or higher

Network Requirements

The bandwidth requirements between the individual components are listed below:

ADONIS Web Client – ADONIS Web Server

Minimum: 2 Mbit Recommended: 10 Mbit

Authentication Mechanisms of ADONIS

This section describes the different authentication mechanisms of ADONIS. The authentication mechanisms can be used separately or in combination. Depending on the used authentication mechanisms, further installation-specific configuration steps may be necessary. Please consult your ADONIS consultant for further information.

Authentication Mechanisms

Standard ADONIS users	ADONIS users are created in the ADONIS Administration. Login to ADONIS requires input of username and password. These credentials are used to authenticate the user against the available data in the ADONIS database. The assignment of user attributes, rights and system roles is controlled in the ADONIS Administration.
LDAP Authentication	Users can either be imported from a directory service or mapped to ADONIS users. Login to ADONIS requires input of username and password. The provided credentials will be used to authenticate the user against the configured directory service. A precondition for this scenario is that the connection of ADONIS to the directory service in use (e.g. Active Directory) is established in the ADONIS Administration. The assignment of user attributes, rights and system roles may be controlled in the ADONIS Administration or synchronised with an external directory service. Specific configuration steps are necessary when setting up ADONIS for this authentication mechanism. Please consult your ADONIS consultant for further information about this authentication mechanism.
IDM Authentication	Users can either be imported from an external user management system or mapped to ADONIS users. Login to ADONIS via single sign-on is possible using an Identity Management System (IDM) A precondition for this scenario is the connection of ADONIS to an authentication server in the target environment which provides means for authentication with an external user management system (e.g. Microsoft Internet Information Services connected to an Active Directory). The assignment of user attributes, rights and system roles may be controlled in the ADONIS Administration or synchronised with an external user management system. Specific configuration steps are necessary when setting up ADONIS for this authentication mechanism. Please consult your ADONIS consultant for further information about this authentication mechanism.
SAML Authentication	Users can either be imported from an external user management system or mapped to ADONIS users. The external user management system must provide an Identity Provider (IdP) for SAML 2.0 (e.g. Active Directory Federation Services [AD FS] or Shibboleth). To log on to ADONIS, the user is redirected to the IdP. Depending on the configuration of the IdP, the authentication is carried out via single sign-on or by entering access data (username and password, certificates, etc.). No server-to-server communication is necessary for this authentication mechanism, since all data is transmitted via the browser. The assignment of user attributes, rights and system roles may be controlled in the ADONIS Administration or synchronised with an external user management system. Specific configuration steps are necessary when setting up ADONIS for this authentication mechanism. Please consult your ADONIS consultant for further information about this authentication mechanism.
OIDC Authentication	Users can either be imported from an external user management system or mapped to ADONIS users. A precondition for using OpenID Connect (OIDC) is the connection of ADONIS to an OpenID Connect provider (OP) that verifies the identity of the user as well as provides basic profile information about the user. To log on to ADONIS, the user is redirected to the OP. Login to ADONIS via single sign-on is possible using OIDC authentication. The assignment of user attributes, rights and system roles may be controlled in the ADONIS Administration or synchronised with an external user management system. Specific configuration steps are necessary when setting up ADONIS for this authentication mechanism. Please consult your ADONIS consultant for further information about this authentication mechanism.

LDAP Support

LDAP/LDAPS support for the providers AD (Active Directory) and eDirectory and comparable LDAP providers. Other LDAP providers are not tested. A specific evaluation can be done on request.

Feature Overview

This table contains a summary of the features of the different authentication mechanisms.

	Standard ADONIS Users	LDAP Authentication	IDM Authentication	SAML Authentication	OIDC Authentication
Login with username and password	Yes	Yes	Yes (depending on the IDM solution)	Yes (depending on the SAML IdP)	Yes (depending on the OP)
SSO	No	No	Yes (depending on the IDM solution)	Yes (depending on the SAML IdP)	Yes (depending on the OP)
On login, synchronize attributes, role and group assignment (with external user management system)	No	Yes	Yes	Yes	Yes
Periodically, synchronize attributes, role and group assignment (with external user management system)	No	Yes	Yes (with LDAP coupling)	Yes (with LDAP coupling)	Yes (with LDAP coupling)
Create users automatically	No	Yes	Yes	Yes	Yes