Set Up miniOrange On-Premise IAM Server Using AWS Marketplace AMI

1. Access the AWS Marketplace Listing

• Go to the AWS marketplace listing.
• Click on View Purchase Options.

2. Launch miniOrange IDP AMI

Navigate to the pricing details.

• Select your desired contract duration.
• Choose any of the 3 license plans.
• Enter the number of user licenses you wish to purchase. The displayed price is per user for the selected contract duration.
• Important: Keep auto-renewal enabled to ensure uninterrupted service after your contract expires.
• Enter the number of user licenses you wish to purchase. The displayed price indicates per user pricing for the selected contract duration.

• Once you’ve verified your license details, click Subscribe. It may take a few moments to create your contract license.
• After the subscription is complete, you’ll see an option to Launch miniOrange IDP AMI. Click it to launch your instance.

3. Verify Reachability

• Confirm that http://<public-ip-of-machine>:8080 is reachable.

4. Create IAM Policy For IDP AMI in AWS

• Go to the AWS Console >> IAM >> Policies.
• Click on Create policy and paste the following JSON:

                
                    {
                    "Version": "2012-10-17",
                    "Statement": [
                      {
                        "Sid": "VisualEditor0",
                        "Effect": "Allow",
                        "Action": "license-manager:*",
                        "Resource": "*"
                      }
                    ]
                }
                
            

5. Create IAM Role For IDP AMI

• Go to the AWS Console >> IAM >> Roles.
• Click on Create role.
• Choose Custom Trust and enter the JSON below.
• Click Next and select the policy you created in the previous step.
• Review the role details and then create the role.

                

                {
                    "Version": "2012-10-17",
                    "Statement": [

                    {
                        "Effect": "Allow",
                        "Principal": {
                            "Service": "ec2.amazonaws.com"
                        },
                        "Action": "sts:AssumeRole"

                    }
                ]
            }
            

6. Modify IAM Role for miniOrange IDP EC2 Instance

• Go to the AWS console >> EC2 Instances.
• Search for your miniOrange EC2 machine using its public IP address and click on it.
• Click on Actions >> Security >> Modify IAM Role.
• Choose the role you created in the earlier step and click Update IAM role.

7. SSH into the Machine and Run Command

• SSH into your machine.
• Run the following command:

sudo chown -R mo-idp:mo-idp /opt/mo-idp-server-ami-4.10.1/moas

8. Access miniOrange IDP DB Setup Page

• Go to http://<public-ip-of-machine>:8080. You will be prompted for the database setup page.

9. Configure and Setup Database

To Configure database :

• By default, miniOrange AMI has a PostgreSQL database on the same machine. For that You need to create a database and set a new password for the postgres user.
• Run the following commands:
• sudo -u postgres psql
• ALTER USER postgres WITH PASSWORD <enter-password>
• If you have a database on a separate machine then make sure that the db is set up and the port is open for the IDP machine.

To Setup Database :

• Go to http://<public-ip-of-machine>:8080
• Enter the database details on the setup page.
• Once completed, you will be prompted to set up an admin account.
• After the admin account is set up, you will see the IAM admin dashboard.

10. Setup miniOrange services

• Follow the instructions here from 3rd step: Starting Accessory Services to setup services.