ebs Client Authentication for Microsoft Entra ID and Google Workspace

The following diagram illustrates access to ebs: central with Microsoft Entra ID and OIDC authentication.

The following diagram illustrates access to ebs: central with Google Workspace and OIDC authentication.

The reference data settings for authentication are configured on the OIDC Issuers screen in reference data (accessed from the Systems ribbon).

The OIDC Issuer reference data grid contains the following fields:

• Issuer - the relationship name (for example: AzureAD)

• ebs Property - the ebs property description (for example: College Email, External Identifier, Person Code, User ID or Username)

• Claim Name - the claim name (for example: preferred_username)

Back to top

The institution settings for Microsoft Entra ID or Google Workspace authentication are configured on the Identity Server screen in institution settings (accessed from the Systems ribbon).

The fields on the Identity Server screen that are relevant to Microsoft Entra ID or Google Workspace authentication are described in the following table.

Back to top

You can configure the shortcut used to access ebs.

To configure the shortcut:

1. Right-click the shortcut.

2. Select the Properties option.

3. Select the Shortcut tab.

4. Edit the Target field.

   The following information must be included in the shortcut target field:

   • OIDC - the OpenID Connect type - set to /oidc microsoft or /oidc google

   • ebsAuthentication - whether to use dual authentication - set to /ebsAuthentication TRUE to enable, FALSE to disable

   • DatabaseType - the database type (for example: /databasetype SQL)

   • DatabaseName - the database name (for example: /databasename <DatabaseName>)

     Note: If the DatabaseName is set to NULL, a Database field is displayed on the Login to ebs: central window where you can enter the relevant database.

   • DatabaseServername - the database server name (for example: /databaseservername <ServerName\DatabaseType>)

   For example:

   "C:\Program Files (x86)\TribalTech\ebs4 Client\TribalTech.EBS.Win.Shell.exe" /oidc "microsoft" /ebsAuthentication "TRUE" /databasetype "SQL" /databasename "<DatabaseName>" /databaseservername "<ServerName\DatabaseType>"

   

5. Click OK.

   The target details are added to the shortcut.

Back to top

You can use a configuration (.config) file to access ebs. The config file is referenced in the properties of the ebs shortcut with the institute parameter specifying the configuration file name (for example: "C:\Program Files (x86)\TribalTech\ebs4 Client\" /institute "InstitutionName").

Note: You can encrypt a linked shortcut file. Refer to Communities for further information about encryption.

To configure the .config file:

1. Open Microsoft File Explorer.

2. Navigate to the location of the ebs installation (for example: C:\Program Files (x86)\TribalTech\ebs4 Client).

3. Create a configuration file with the relevant institution name (for example: Tribal.config).

   Note: The configuration file name is referenced in the shortcut Start in: field (for example: /institute "Tribal").

4. Right-click the relevant file and open with the relevant code editor (for example: Notepad++).

   The following information must be included in the .config file:

   • OIDC - the OpenID Connect type - set to microsoft or google

   • ebsAuthentication - whether to use dual authentication, set to true to enable, false to disable

   • DatabaseType - the database type (for example: sql)

   • DatabaseName - the database name

     Note: If the DatabaseName is set to NULL, a Database field is displayed on the Login to ebs: central window where you can enter the relevant database.

   • DatabaseServername - the database server name

   • ebsAuthPwd - the ebsAuth user database password, only needed if you are not using the default password

     Note: You only need to specify the ebsAuth user database password if you are not using the default password. It is recommended that you encrypt the configuration file if you specify the ebsAuth user database password value. Refer to Communities for further information about encryption.

   For example:

   <configuration>

   <configSections>

   <section name="CustomerSettings" type="System.Configuration.NameValueFileSectionHandler"/>

   </configSections>

   <CustomerSettings>

   <add key="databasetype" value="sql"/>

   <add key="databasename" value="DatabaseName"/>

   <add key="databaseservername" value="DatabaseName\ServerName"/>

   <add key="ebsauthpwd" value="<PASSWORD>"/>

   <add key="oidc" value="microsoft"/>

   <add key="ebsauthentication" value="true"/>

   </CustomerSettings>

   </configuration>

5. Click Save.

6. Right-click the ebs shortcut and select the Properties option.

7. Select the Shortcut tab.

8. Edit the Start in field to include the config file name (for example: "C:\Program Files (x86)\TribalTech\ebs4 Client\" /institute "Tribal").

   

9. Click OK.

   The configuration details are added to the shortcut.

Back to top

You can log in to ebs with dual authentication (ebs authentication enabled or disabled in the configuration (.config) file or shortcut parameters).

Note: In this example the OIDC value is set to 'Microsoft' in the shortcut parameters or configuration file.

To log in to ebs:

1. Start ebs: central.

   If dual authentication is enabled the Login to ebs: central window is displayed.

   

2. Enter login credentials and click OK. Alternatively, click the Sign in with Microsoft button.

   If dual authentication is disabled the Sign in to your account window is displayed.

   

3. Select the relevant account.

   

   ebs: central is displayed.

   If you are accessing your account for the first time with OIDC authentication, a message is displayed.

   

4. Click Accept.

   If there are authentication issues, an error message is displayed.

Back to top

You can log in to ebs with dual authentication (ebs authentication enabled or disabled in the configuration (.config) file or shortcut parameters).

Note: In this example the OIDC value is set to 'Google' in the shortcut parameters or configuration file.

To log in to ebs:

1. Start ebs: central.

   If dual authentication is enabled the Login to ebs: central window is displayed.

   

2. Enter login credentials and click OK. Alternatively, click the Sign in with Google button.

   If dual authentication is disabled the Sign in with Google window is displayed.

   

3. Select the relevant account.

   ebs: central is displayed.

4. Click Accept.

   If there are authentication issues, an error message is displayed.

Back to top