The General Settings menu enables organizations to configure various policies and settings. This tutorial provides a comprehensive guide to all the configurations you can manage at the organization level.

Log in to the Unifyia platform as an administrator. On the Dashboard, navigate to Configurations > General Settings. You will find three tabs, one each for General Information, Policies and Settings, and Certificates.

The General Settings option on the Unifyia platform enables you to configure the following:

• General organizational details and endpoints configuration details of the Unifyia platform.
• Policies and Settings such as signing events digtally for security audit, session sign out, biometrics validity expiration, card expiration, and PIV verifications policy.
• Certificate Settings related to FASC-N for PIV, PIV-I, and CIV IDs and Subject DN attributes.

General Information

Under the General Information tab, you can view the following organizational details. Select Update to save the changes.

1. Organization Name: View the name of your organization. Your organization name and the account name are the same.
2. Contact Email: View the email address with which your organization is registered with the Unifyia platform.
3. Contact First Name: View the first name of the contact person for your organization. You can edit this field if required.
4. Contact Last Name: View the last name of the contact person for your organization. You can edit this field if required.

Endpoints

The following is a list of SAML and OIDC endpoints that the organization publishes. These endpoints can be used to communicate with the platform.

OpenID Endpoint Configuration: This link contains the IdP (platform) endpoint configuration details for the service providers to configure it as an SSO in the relying party application. It contains the authentication, token, and certificate URLs and user endpoint details.

SAML 2.0 Identity Provider Metadata: SAML is an XML-based protocol used for exchanging authentication and authorization data between parties, specifically between an identity provider (IdP) and a service provider (SP). Access this link for the organization metadata (Unifyia platform metadata) required for the service providers to integrate it as an IdP using the SAML Protocol.

Policies and Settings

Navigate to the Policies and Settings tab. The following are the policies and settings that can be configured to comply with the set security standards of your organization:

How to Set a Cron Expression?

A cron expression is a string used to define a schedule for running tasks or jobs automatically at specified intervals. It's commonly used in job schedulers like Cron to schedule repetitive tasks such as backups, system maintenance, or sending emails. The platform leverages a cron expression to fetch the list of users whose biometrics are expiring and expired. Cron expressions provide flexible, precise control over task scheduling.

A cron expression may consist of up to seven fields, each representing a unit of time, and it can be formatted as follows: The schedule component of the syntax is broken down into 5 different fields, which are written in the following order:

Together, tasks scheduled in a crontab are structured like this:

minute hour day_of_month month day_of_week [command_to_run]

Example Cron Expressions:

Here are some more examples of how to use cron's scheduling component:

Wildcards:

• *: Represents "every" (e.g., every minute, every day, etc.).
• ,: Specifies multiple values (e.g., "1,3,5" for specific days of the week).
• -: Defines a range of values (e.g., "1-5" for Monday through Friday).
• /: Specifies step intervals (e.g., "*/10" means every 10 units, such as every 10 minutes).

Certificate Settings

FASC-N (Federal Agency Smart Card Number) and Subject DN (Distinguished Name) are both crucial components of PIV (Personal Identity Verification) ID certificates. While the FASC-N uniquely identifies the PIV card, card holder, and ensures it's issued by an authorized agency, the Subject DN provides detailed identity information that ties the PIV certificate to the individual cardholder. These elements play important roles in ensuring secure, accurate identification, and authentication of federal employees or contractors who use PIV cards. FIPS 201-3 standard mandates the use of FASC-N.

The Unifyia platform allows you to configure the FASC-N and Subject DN values that would be embedded in the certificates as a part of credential issuance. Navigate to the Certificate Settings tab. You will notice two tabs - one for FASC-N and another for Subject DN settings.

FASC-N Settings

Select the FASC-N tab to configure the FASC-N contents for PIV, PIV-I, and CIV identities. There are three tabs, one each for the PIV, PIV-I, and CIV identities. Select the required tab and configure the FASC-N settings. For PIV and PIV-I identities, the FASC-N is mandatory, whereas for a CIV ID, it is optional. If your organization requires FASC-N for a CIV ID as well, enable FASCN-N Encoding option under the CIV section and configure the values as required. For all the ID types, the configurable FASC-N parameters are same. The following table describes the available parameters (fields), their character length, and the possible values.

Subject DN Settings

The platform allows you to configure Subject DN attributes for certificates. To configure, navigate to the Subject DN tab under the Certificate Settings tab. Currently, the platform supports the following attributes:

• Common Name: This is the primary identifier for an individual. A dropdown that lists the available formats for the common name is enabled. Select the required format. This ensures that the selected common name format is included in the Subject DN of the certificates. Available common name formats are:
  • CN=firstname lastname, e.g., Jane Smith
  • CN=firstname lastname intended usage short, e.g., Jane Smith Auth
  • CN=firstname lastname intended usage, e.g., Jane Smith Authentication
  • CN=firstname lastname (Affiliate), e.g., Jane Smith (Affiliate)
  • CN=firstname initial. Lastname, e.g., Jane A. Smith
  • CN=firstname middlename lastname, e.g., Jane Alex Smith
  • CN=lastname.firstname.middlename, e.g., Smith.Jane.Alex
  • CN=firstname lastname - intended usage – expiry, e.g., Jane Smith - Signature - Expires 01/15/2025
  • CN=firstname lastname - intended usage - agency identifier, e.g., Jane Smith - Signature – 123456
  • CN=firstname lastname - intended usage - SKI identifier, e.g., Jane Smith - Authentication – 123456
• Organizational Unit (OU): Identifies a department or division within the organization (e.g., IT Department, Security Division). It provides a way to further qualify the organization. It helps distinguish certificates within the same organization.
• Organization (O): This is the full legal name of the organization or company (e.g., Unifyia). This must be a legally registered name and verifiable when used in public certificates.
• Country (C): This is a two-letter ISO 3166 country code representing the country in which the organization is legally based (e.g., US for United States, DE for Germany, FR for France). It may be noted that only one country code is allowed in a subject DN.
• Email Address (emailAddress): A user attribute used to identify or contact the subject via email. This is often included in certificates for individuals or roles.
• State or Province Name (ST): The full name of the state or province (e.g., California).
• Locality Name (L): The city or locality (e.g., San Francisco).
• Street Address (STREET): The physical street address of the subject.
• Unique Identifier (UID): A unique identifier for the user, such as a username or ID number.

Select the cross icon to remove an attribute. Select the plus icon to add an attribute. The selected attributes will be displayed in the Subject DN list when configuring certificates in the workflow.