This document describes the user interface of the Secret Double Octopus Management Console and how to work with it. The content is intended for administrators of the Octopus Authentication Solution. Additionally, individual topics can be used as an overview of the system for management and non-technical staff.

To get started, refer to the following sections:

Solution Overview

The Octopus Authentication Server uses new and varied methods of authentication, such as OKTA, ForgeRock, FIDO, OTP and Octopus Authenticator. Once the authentication is verified, the user is authenticated. The Authentication Server can then provide attestations to relying parties for the user's identity.

The Authentication Server is typically deployed on the enterprise domain, where it is configured to access the directory service and to work with relying parties that are either on-premise or SaaS. Connecting to the directory service allows the administrator to assign Octopus Authenticators to users and define authentication policies. Connecting with the relying parties can be done by configuring standard interfaces (e.g., RADIUS, SAML, etc.) or by defining a non-standard interface.

In some cases, the Authentication Server authenticates the user and produces the required attestation for the relying party. In other situations, the Authentication Server may need to also facilitate the exchange of a session secret required by the relying party. For example, legacy systems that are still heavily password-dependent may require that a password be produced. In such cases, the Authentication Server provides a temporary session password that is reset at the end of the session.

The administrator configures the system settings from the Secret Double Octopus Management Console.

Supported System Components and Versions 

The following tables list supported Linux environments, mobile operating systems and browser versions.

Supported Linux Environments

IMPORTANT: If you are using Linux 9 and the tar command is not pre-installed on your machine, please run the following command before installing Octopus Authentication Server:

yum install tar

Supported Mobile Devices

Supported Browsers: Management Console UI and User Portal

Supported Browsers for SAML Authentication

Browser	Supported Versions
Chrome	30 and higher
Edge	41 and higher
Firefox	25 and higher
Internet Explorer	11.0

Accessing the Management Console

Access the Octopus Management Console by entering the base URL and port in your browser (e.g., https://FQDN:8443). The first post-installation login must be done using the Super Admin username and password set during installation of the Octopus Authentication Server (Login with Email and Password). You can then start to integrate directories, add users and register devices.

After users and devices have been enrolled, you will be able to log into the Management Console using Octopus Authenticator.

Note: To access the Management Console, users must be enrolled with the Octopus Server and have a role of Admin, Helpdesk or Auditor.

Login with Octopus Authenticator

This is the default login method. Enter your email address in the field, and then click LOGIN.

After receiving the push notification to your Octopus Authenticator mobile app, authenticate as you normally would with any service.

Login with Email and Password

To access the Octopus Management Console using your administrative credentials, make sure that the Login with Octopus Authenticator toggle button is inactive. Then, enter your email address and password in the appropriate fields, and click LOGIN.

Activating Your License

Before you can begin working with the Octopus Management Console, you need to upload the license file. (This file is emailed to you during the deployment process or supplied by the Octopus Customer Success team.) Until you upload the file, your license information will not be displayed in the Console, and you will be prompted to activate the system each time you log in.

IMPORTANT: A unique license file is required for each environment. Using the same license for multiple environments can cause enrollment disruptions and authentication failures.

To obtain additional licenses for staging, development or other environments, please contact support@doubleoctopus.com

To upload the activation file:

1. Select System Settings > General Settings. Scroll to the License frame and click Upload Activation File.
   
   

   The End-User License Agreement popup opens.
   
   

2. Review the content of the agreement. Then, at the bottom of the popup, select the I agree checkbox and click OK.
   
   

   The popup closes, and the Open dialog is displayed.
   
   

3. From the Open dialog, browse to the relevant license file and click Open.
   
   

   You will be prompted to enter the activation file password that was sent to you together with the license file.
   
   

   
   
   

4. After entering the password, click Upload.
   
   

   Following a successful upload, a confirmation message is displayed and your license information is displayed in the License frame.
   
   

   
   
   

5. If it becomes necessary to upload the file again or to upload a new license file, click Reupload Activation File and repeat Steps 2-4.
   
   

Management Console Features Overview

The main features that appear on most pages of the Management Console are described in the table below the diagram.

Number	Feature	Description / Notes
1	Menu bar	Provides access to the various menus of the Management Console. For more information, refer to Menu Bar.
2	Menu title	Name and description of the currently displayed menu.
3	Publish button	Shows information about publishing status and provides quick access to the Publish dialog. For more details about publishing, refer to Configuring System Settings (Publish tab).
4	Component Status Information	These icons indicate the connection state and status of various system components. For details, refer to Component Status Icons.
5	Search by ID tool	Opens the page displaying details about any user, group or workstation in the system. For more information, refer to Using the Search By ID Tool (below).
6	Username options menu	Click your username to display the following options: About:  Opens a popup displaying software version information and support resources. You can copy the current version number to your clipboard by clicking the Copy icon in the Authenticator Server Version field. Clicking the General Terms & Conditions link opens a popup where you can view the content of your subscription agreement. What's New?: Displays a description of the features introduced in the current version. Logout: Ends your Management Console session.
7	Help access	Click this icon to open an article describing the current page and how to work with its features.
8, 9	Item presentation and navigation tools	These components, which generally appear on main menu screens, enable you to control the number of items displayed on the page and scroll to other pages of the list. For details, refer to Page Presentation and Navigation Tools (below).

Using the Search By ID Tool

This tool helps administrators easily locate and view details for users or workstations with identified issues, so the issues can be quickly resolved. The unique ID of the user, group or workstation is presented in the Auditing tab  as part of the issue summary.

To use the Search By ID tool:

1. Click to open the Search by Id popup.
   
   

   
   
   

2. From the Find dropdown list, select User, Group or Device.
   
   

3. In the By ID field, enter the entity's unique ID.
   
   

4. Click Navigate.
   
   

   The Details page for the user, group or workstation is displayed.
   
   

Page Presentation and Navigation Tools

Menus that display lists of many items (such as Devices, Services, etc.) feature components that allow you to more easily view the list and quickly navigate through multiple-page lists. The icons at the top of these pages enable you to control the display of page content:

Icon	Presentation
	Items are presented in separate cards.
	Items are presented in standard list form, with up to 10 items on a page.
	Items are presented in compact list form, with up to 20 items on a page.

When items are presented in list view, the Items per page feature (at the bottom of the page) allows you to select the number of items displayed on each page of the list (10, 20. 50 or 100).

The navigation toolbar at the lower right corner of the page enables you to easily scroll to the next page, previous page, or first / last page of the list. In addition, you can immediately view any page of the list by selecting the page number from the page list, at the far right of the navigation toolbar.

Menu Bar

The menu bar is located on the left side of the Management Console. It can be collapsed and expanded by clicking the icon at the top of the bar.

The menus are:

• System Settings: Enable you to view and update system configuration settings, such as authenticators, mail server settings and more.
  
  

• Directories: Allows you to integrate corporate directories with the system and configure settings for each directory.
  
  

• Manage Users: Lists all users according to their associated directories and enables you to add, remove and perform other administrative actions on users.
  
  

• Devices: Lists all workstations in the system, provides detailed information about them and allows you to perform administrative operations on them.
  
  

• Services: Lists all services integrated with the Octopus Management Console and enables you to add and update services.
  
  

• Portal: Allows you to control settings for the User Portal.
  
  

• Applications: Enables integration of applications with the Authentication Server and the Windows Agent, so users can access the applications with single sign-on.
  
  

• Reports: Provides a variety of out-of-the-box report templates that enable tracking and monitoring of user status, enrollment trends, authentication events and more.
  
  

• Auditing: Displays a log of every administrative action performed by the system or by users.
  
  

Component Status Icons

The toolbar that appears at the top of every page of the Octopus Management Console indicate the current connection and state of important system components. The icons are described in the table below.

Icon	Description / Notes
	Indicates database load status. A warning icon appears when creation of an additional read-only database is required to maintain report generation functionality. Click the warning icon to open the Database tab of the System Settings menu, where you can configure the read-only database.
	Shows connection status with the Octopus Cloud Server. Connection issues are indicated by . Cloud Server connection issues are generally related to the activation file that you need to upload as the first step of system configuration. For details, refer to Activating Your License.
	Shows the current status of disk usage according to parameters set in the Audit Logs tab of the System Settings menu. Storage issues are indicated by . Click the warning icon to view and update log storage settings. For details, refer to Configuring Audit Logs Settings.
	Indicates connection status of the Authentication Server(s). Connection issues are indicated by . Click the warning icon to open the Auth Servers tab of the System Settings menu, where you can check and verify server settings.
	Indicates connection status of the integrated directories. Connection issues are indicated by . Click the warning icon to open the directory settings.
	Shows connection status of the SMTP server. Mail server issues are indicated by . Click the warning icon to open the Mail Server tab of the System Settings menu.
	Indicates license status. License issues are indicated by . Click the warning icon to open the General Settings tab of the System Settings menu, where you can review license details.