Post-installation steps
Once the installation completes, the User Management Package services are running and configured to work together; however, except for the Signer Server, they are not yet populated with any dataspace‑specific items. No users are registered in the Authentik server, no Participant Authentik servers are onboarded to the Dataspace Operator’s Authentik instance for federated authentication, and no DIDs or SSI credentials are stored in the SSI Wallet API.
Perform the following steps to verify that all services are operating correctly and to begin populating the repositories of your deployed services.
Verify the availability of each deployed service
The User Management Package deploys 4 main services (Authentik server, Signer Server, SSI Wallet API, and SSI Wallet UI) and two support services (PostgreSQL and Traefik).
The table below uses the default port for each main service, as listed in the TCP Ports Configuration chapter.
Authentik
https:<server_FQDN>:9443
Accessible directly through the server's hostname.
Signer Server
https:<server_FQDN>:8443
Accessible directly through the server's hostname.
SSI Wallet API
https:<wallet-api-FQDN>
Accessible through the Traefik service, on port 443.
SSI Wallet UI
https:<wallet-api-FQDN>
Accessible through the Traefik service, on port 443.
Verify the connection to the Signer Server
Access the Signer Server health endpoint (https:<server_hostname>:8443/api/v1/health ) and confirm that the service status is ok.
Verify the connection to the SSI Wallet API
Access the SSI Wallet API URL (https:<wallet-api-FQDN>) and check that the Swagger interface of the service is displayed.
Verify the connection to the SSI Wallet UI
Access the SSI Wallet UI URL and check that the login screen is displayed.
Verify the connection to the Authentik server
Access the Authentik server URL (https:<server_FQDN>:9443) and make sure of the following:
The Authentik first-steps screen is displayed (the image below illustrates the Authentik login screen, not the first-steps screen).
The connection is HTTPS
and the digital certificate used for this connection is the correct one.
Set the Authentik server administrator account
The first time you access the Authentik server, the first-steps user interface is displayed. Go through the flow to register the administrator account (akadmin) for the Authentik server.
With this account, you will perform all administrative tasks related to managing users and participant organizations, such as:
onboarding participant organizations in the Central Identity Provider (Dataspace Operator Authentik server)
creating invites to register users
updating/deleting user profiles
assigning users to groups
Consult the Operational Guidelines chapter for details on how to perform these tasks.
Create the administrator group for the SSI Wallet UI
The SSI Wallet UI can be configured to allow access only to users who belong to a designated group in the Authentik server. In a production environment, defining this administrator group is essential, as managing the organization’s DIDs and Verifiable Credentials is a critical responsibility and must be restricted to explicitly authorized users.
Follow the instructions in the chapter Create Admin User Group to create an administrator group for the SSI Wallet UI.
After the designated SSI Wallet UI administrator user is registered in Authentik (see the User Enrollment chapter), follow the instructions in the chapter Assign User to User Group to add the user to the SSI Wallet UI administrator group.
Onboard Dataspace Participants
For a new Participant organization to access the marketplace, its Participant Authentik server needs to be onboarded on the Dataspace Authentik server. The onboarding process involves creating a trust relationship between the two Authentik servers.
The Dataspace Operator Administrator must follow the instructions in the chapter Onboarding Data Space Participant to onboard new organizations to the dataspace
Populate the SSI Wallet
The designated SSI Wallet UI administrator should follow the instructions in this chapter to populate the SSI Wallet with the company's DIDs and Verifiable Credentials.
Last updated