Preparation
Installing required software
Before targeting an application that uses the PowerShell script, ensure that the following are installed on all Bravura Security Fabric servers:
PowerShell
Any required PowerShell modules
Any required PowerShell snap-ins
Writing a script
Account management operations are implemented using a PowerShell script to provide details for interaction between Bravura Security Fabric and the target application. You must write this script and include it in the <Program Files path>\Bravura Security\Bravura Security Fabric\<instance>\ script\ directory on the Bravura Security Fabric server.
PowerShell's execution policy is a safety feature that controls the conditions under which PowerShell loads configuration files and runs scripts. Ensure that your PowerShell execution policy allows you to run your PowerShell scripts for their digital signature state. For more information see https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies?view=powershell-7.2
Some sample scripts are provided in the samples directory. If you cannot find the sample file, try re-running setup
to modify your installation. Sample files are automatically installed with complete (typical) installations. You can select them in custom installations.
Caution
Any sample script should be modified to fit your environment and prevent security exploits.
Configuring a target system administrator
In some cases, Bravura Security Fabric uses a designated account (for example, psadmin) on the PowerShell script target system to perform operations.
Ensure that the designated account can log into the application from the Bravura Security Fabric server, and that the account has the necessary privileges to set passwords and manage accounts.
Ensure that you set and note the account’s password. You will be required to enter the login ID and password when you add the target system to Bravura Security Fabric .
Otherwise, when a designated account is not required, the administrator credentials can be left blank.