How to create MACMA tenants with basic authentication

For the MACMA tenant configuration, it is necessary to manually create organizations and configure them. Organization and tenant refer to the same concept.

This guide is derived from here: NEXOPS: How to create a new Tenant.

Password requirements

During the MACMA tenant creation, it is required to create users and assign them an initial password. This password will be replaced after the first login attempt but it still needs to fulfill the requirements. Keep them in mind while setting the password:

must contain at least 1 upper case characters.
must contain at least 1 lower case characters.
must contain at least 1 numerical digits.
minimum length 12.

Create organization

Login to default tenant with admin credentials from custom-values (variables macmaPortalAdminUser and macmaPortalAdminPassword)
Go to Access Management → Organizations
Create an organization with admin username "tenant_admin" and any valid password (see password-requirements)
Document the tenant id

Create contracts

Follow these steps for each organization.

Create 2 new contracts:
1. Create 1 contract for Portal and MACMA called "Foundation" (description: "provide Roles: Access-Manager, User-reader, and Portal-user, Portal-Admin, Portal Operator, Portal Registration") & Type Provision (Note: There could exist a UI wrong description of the types as the type we really need is access/consumer, see MACMA provider and consumer scope naming in the UI )
  1. During the second step "Contractual Partner", activate the checkbox "Assign all roles of the contract to the following user:" and insert the "tenant_admin" username defined in the previous steps
2. Create 1 contract for Device portal called "Device Portal" with all Device Portal roles except DP_CAN_MANAGE_DEVICE_GROUPS (description: "Provide Device Portal Roles to Device Portal") & Type Provision
  1. During the second step "Contractual Partner", activate the checkbox "Assign all roles of the contract to the following user:" and insert the "tenant_admin" username defined in the previous steps

Configure tenants

For each created tenant, follow these steps:

Login to the tenant
1. On first login with the previously created admin user a new password needs to be specified. Save this password.
Create a new user for operations tasks
1. Assign this user any valid password (see password-requirements).
Create Group "Web-application User"
1. Assign the role Web Portal User and all Device Portal roles except DP_CAN_MANAGE_REPOSITORY_SOFTWARE, DP_CAN_MANAGE_SOFTWARE_ON_DEVICE, DP_DEVICE_DELETE and roles starting with "DP_API"
2. Assign the created user to this group
Create Group "Artifact Repository Manager".
1. Assign Device Portal roles DP_CAN_MANAGE_REPOSITORY_SOFTWARE, DP_CAN_MANAGE_SOFTWARE_ON_DEVICE
2. Assign the created user to this group
Create a Group called "Tenant Owner" with the roles: Access Manager, Web Portal Admin, Web Portal User and User Reader
Assign role User Reader to the module called "Nexeed Device Portal"
Create a Module called "DP_Solution_API"
1. Provide a secure password
2. In the next tab, deactivate user login and finish the dialog
3. Switch to the tab "Assigned Roles" and assign all Device Portal roles starting with "DP_API"
4. Save the client id and client secret
Log out and login with the created user. Change the password as prompted and save the credentials.