Intrexx Mobile App 2.0

Contents

1. Connect to portal server

Address

Enter the address of your portal here. You need the corresponding permissions, and a VPN access where appropriate, to connect to the portal server. Click here for more information about using VPN apps. If the portal is an HTTPS portal with a self-signed certificate, then this needs to be installed on the mobile device. Click here for more information about installing the certificates.

Connect

The connection to the portal server is established with this button.

2. Register portal

You can register a portal on your device on this page. The possible authentication methods are: Technical modifications need to be performed for other authentication methods. Click here more information about this.

Username / Password

Enter the username and password here.

Domain

Where appropriate, enter the required domain here.

Log in

Press this button to log in.

3. Enable notifications

Enable

With this button, you will receive notifications from the portal. These are sent automatically using the push notification action in processes.

Disable

The portal will not send any notifications to the current mobile device.

4. Homepage - Portal overview

The registered portals are listed here. You can change their order via drag & drop.

Android

Navigation bar

You can reach the settings via the menu button on the left-hand side of the navigation bar. Click on the notification bell to open the notification overview. If there are notifications for these portals, the number of unread notifications for all portals will be shown next to the "Intrexx" link. The registration page will open when you press the button on the right-hand side in the navigation bar.

Portal list

You will see a circular symbol with a number in it next to each portal name. This number represents the total number of notifications for the respective portal. Press this button to open the overview of the notifications for the current portal. If you press the portal name, the homepage of the corresponding portal will open in the portal browser. If you swipe left on a portal name, the portal will be deleted. If you swipe right on a portal name, the options for this portal will be shown.

Settings

Loads the portal settings.

iOS

Navigation bar

You can reach the settings via the menu button on the left-hand side of the navigation bar. Click on "Intrexx" to open the notification overview. If there are notifications for these portals, the number of unread notifications for all portals will be shown next to the "Intrexx" link.

Portal list

You will see a circular symbol with a number in it next to each portal name. This number represents the total number of notifications for the respective portal. Press this button to open the overview of the notifications for the current portal. If you press the portal name, the homepage of the corresponding portal will open in the portal browser. If you swipe left on a portal name, the options for this portal will be shown.

Settings

Opens the portal settings.

Delete

Removes the portal registration.

The registration page will open when you press the button at the bottom right.

5. Notification overview for all portals

Notifications from all portals are shown on this page. "Today" displays messages from today, "All" displays all notifications. The notifications are grouped together per portal in the notification list. Read notifications are greyed out. Press on a notification to open the corresponding page in the portal browser.

Android

Press the delete button next to a notification to remove it. You can delete all or all of today's notifications from the burger menu at the top right. Press on a notification to open the corresponding page in the portal browser.

iOS

A notification can be deleted via the delete button to its right. By pressing the delete button to the right of a portal name, all notifications for that portal will be deleted. Press on a notification to open the corresponding page in the portal browser.

6. Notification overview for the current portal

Notifications from the current portal are shown on this page. "Today" displays messages from today, "All" displays all notifications. Read notifications are greyed out. A notification can be deleted via the delete button to its right. Click on a notification to open the corresponding page in the portal browser.

7. Portal browser

Android

The navigation bar contains two buttons at the top left for moving forwards and backwards through the portal. The home button in the navigation bar closes the portal browser.

iOS

The navigation bar contains two buttons at the top left for moving forwards and backwards through the portal. Press "Done" in the navigation bar to close the portal browser.

8. Settings

You can reach this page via the homepage.

8.1. Personal settings

8.1.1. Background image

You can select a different background image here.

8.1.2. Intrexx images

You can select a pre-designed image for the background here.

8.1.3. My photos / Camera

You can choose an image stored on your mobile device or take a new picture with the camera. You can choose a theme (white / black) for camera images.

8.2. General

Help

Android

Opens the Online Help in an internal browser (web view).

iOS

Opens the Online Help in an external browser.

Opens the Online Help in an external browser.

General terms and conditions

Opens the general terms and conditions.

Imprint

Displays the imprint

8.3. Extended

Delete cookies

All cookies in the portal browser are deleted.

Set to default

Resets all settings to the default settings

Version number

Displays the version number.

Fingerprint

You can protect the app with a fingerprint stored on your device, provided your device supports this function. If you are using iOS, you can also protect the app with the Touch ID.

9. Portal settings

Android

You can reach this page via the homepage by swiping right on a portal name in the list. The portal name and address as well as the username are shown here. Furthermore, you can enable or disable notifications and a VPN client for this portal.

iOs

You can reach this page via the homepage by swiping left on a portal name in the list. The portal name and address as well as the username are shown here. You can adjust each field by pressing it.
The changes made here only affect the encrypted data saved on the device. The data is not synchronized with the Intrexx user management system.

You can enable or disable notifications for this portal here. If a connection to the portal cannot be established when registering it for the first time, the option for connecting via VPN will be shown. You can switch off or reset the configuration at that time from these settings. Additionally, you can decide whether the access data should be permanently saved on the device.

Appearance when only one portal is registered

If you have only registered one portal, you can also select a homepage for the Intrexx App here. Press "Homepage" to load the options list for the homepage. Press "Homepage" to open the page for selecting the homepage. You can choose between the portal overview, the notification list for all portals or to open the portal directly in the portal browser here.

10. Install certificates

Certificates need to be in the PKCS12 format (i.e. .pem or .cer). Android devices accept this format without issues. The PKCS12 format is the easiest to install.

Android

The certificate can be installed manually via the smartphone's memory. To install the certificate manually, it needs to be on the smartphone as a .pem file. Proceed as follows:
  1. Move the .pem file to the download folder of the smartphone.
  2. Open the Android settings of the smartphone.
  3. Select the menu Security / Credential storage / Install from phone storage / SD card.
  4. Navigate to the directory where certificate file is stored, and then open it.
  5. When asked, enter the PIN of your device.
  6. Afterwards, provide the certificate with a name of your choice.
You can check whether the certificate was installed successfully by going to Security / Credential storage / Trusted credentials / Users. You certificate with the name of the organization used in the certificate should be shown here.

The names of the menu items may vary depending on the Android version.

Another option is per download: Provide the certificate as a download and allow users to download it to their smartphone using their browser. The certificate can be installed by clicking on the certificate or via "Settings" in your smartphone.

iOS

The certificate can be installed in the Mobile Device Management (MDM) by your system administrator or manually via the smartphone's memory. To install the certificate manually, it needs to be on the smartphone as a .pem file. Proceed as follows:
  1. Open the stored certificate to access the configuration profile.
  2. You can install the certificate in the configuration profile.
  3. When asked, enter the PIN of your device.
  4. Activate the certificate via Settings / General / About / Certificate Trust Settings.
You can view the installed certificate under Settings / General / Profile.

11. Using VPN apps (iOS, Android)

On the connection page of the Intrexx Mobile App, you can connect to the Intrexx portal server by entering the portal address. Before doing this, you should make sure that you have the corresponding permissions to access the server. In some cases, you may need VPN access. Please contact your system administrator if this is the case. The VPN access can be set up as follows:
  1. The access is stored manually in the system settings of your device
  2. The access is registered using a VPN application
The VPN connection must be available before you can access the portal. The connection can be created with a VPN app of your choice. Some VPN apps allow themselves to be started by another app. These can be started by the Intrexx app directly. Here is a list of supported VPN apps (with reservations): In some cases, the access must be created manually before starting the portal. This is done by opening the VPN app and registering or starting the connection, respectively.

12. Authentication - Technical modifications

If you are using the "Intrexx authentication", modifications concerning authentication are not required. Register the portal in the Intrexx Mobile App using its HTTPS URL and log in with your Intrexx username and password.

Minor modifications need to be made to portals that operate with user authentication against an Active Directory so that the Intrexx Mobile App can access them. The SSL certificate of the LDAP server needs to be imported in the portal properties, if the server is available under encryption via the LDAPS protocol at port 636. This is not required if it listens without encryption via the LDAPS protocol at port 389.

Now, add another authentication module to the file "lucyAuth.cfg" in the portal directory /cfg. Correct the provider URL of the Active Directory server accordingly and copy the entire section into the lucyAuth.cfg, for example at the end of the file. 
IntegratedMobileAuth
{
	de.uplanet.lucy.server.auth.module.integrated.IntegratedLoginModule sufficient
		debug=false;

	de.uplanet.lucy.server.auth.module.ldap.LdapBindLoginModule sufficient
		java.naming.provider.url="ldaps://example.domain:636"
		java.naming.security.authentication="simple"
		java.naming.security.principal="$[DN]"
		debug=false;

	de.uplanet.lucy.server.auth.module.anonymous.AnonymousLoginModule sufficient
		debug=false;
};
If the connection to the Active Directory server via LDAP is not encrypted, modify the provider URL accordingly. Usually, the port 389 is used.

Add the name of the new authentication module (IntegratedMobileAuth) to the binding scope "web" in the file "om.cfg" in the portal directory /cfg: 
<binding scope="web" auth-type=" IntegratedMobileAuth"/>
If the authentication should take place against an Active Directory, the call needs to be HTTPS encrypted via a virtual directory on the web server without Windows authentication (anonymous authentication). The superordinate paths need to be activated under the ASP settings.

Afterwards, restart the portal service. In both scenarios, we expect encrypted connections via SSL/TLS for security reasons.

Both Intrexx Mobile App users and users who access the portal via a desktop browser can now log in to the portal with their Active Directory user and password.

Officially signed certificate

If you are already using an officially signed certificate, you can now enter the URL of your Intrexx portal in the app. If the connection request functions, you will be asked to authenticate yourself. If you use a self-signed certificate, a configuration file with the full certificate string needs to be stored on the end device. So that the self-signed certificate can be trusted, the respective end device needs to the know the string of the CA certificate. You need to pack the certificate of this string into a profile with corresponding software (e.g. via Apple Configurator2 or Airwatch). This then needs to be installed on the devices. The self-signed certificate must not be contained in the profile. Please note that when accessing the portal from outside the company network, that a mobile VPN client will be required.

13. Register API key

The API key for receiving Push notifications from the portal on the mobile device, can be requested by registered customers in the United Planet Support Center. Enter this key in the Tools module.