Configure a JWT Authenticator in Horizon Console

Starting with Horizon 2506, administrators have the ability to manage Horizon Cloud Authenticators and configure Horizon JWT Authenticators for Universal Broker support from the Horizon 8 Admin Console.

You associate a Horizon JWT authenticator with a Connection Server instance. If your deployment includes more than one Connection Server instance, you must associate a separate JWT authenticator with each instance.

You can configure more than one Horizon JWT authenticator to a Connection Server and all the authenticators can be active simultaneously. However, the entity-ID of each of these JWT authenticators configured on the Connection Server must be different.

Procedure

1. In Horizon Console, navigate to Settings > Servers.

2. On the Connection Servers tab, select a server instance to associate with the Horizon JWT authenticator and click Edit.

3. Select the Authentication tab on the Edit Connection Server Settings page. Use the drop-down from Delegation of authentication to Horizon JWT Authenticator to enable or disable the JWT authenticator.

   Option	Description
   Disabled	JWT authentication is disabled.
   Allowed	JWT authentication is enabled.

You can configure each Connection Server instance in your deployment to have different JWT authentication settings, depending on your requirements.

Managing Horizon JWT Authenticators

You can Add, Edit and Remove Horizon JWT authenticators from the Horizon Console. You can also Enable and Disable Horizon JWT authenticators associated with a selected server instance from the Horizon Console.

Add a Horizon JWT Authenticator

1. From the Edit Connection Server Settings page click Manage Horizon JWT Authenticators.
2. Click Add.
3. Add the Horizon JWT Authenticator configuration code in the dialog box. The configuration code is the base 64 encoded string payload for authenticator addition and update.
4. Select the Enabled for Connection Server checkbox only for the connection servers you want to enable the authenticator for. Click OK to Save.

The list of JWT authenticators created for the connection server cluster is displayed on the Manage Horizon JWT Authenticators page.

Edit/Enable/Disable a Horizon JWT Authenticator

1. From the Edit Connection Server Settings page click Manage Horizon JWT Authenticators.
2. Select the Horizon JWT authenticator to enable/disable.
3. Click Edit.
4. To enable, select the Enabled for Connection Server checkbox; to disable, deselect the Enabled for Connection Server checkbox.
5. Click OK to Save.

Remove a Horizon JWT Authenticator

1. From the Edit Connection Server Settings page click Manage Horizon JWT Authenticators.
2. Select the Horizon JWT Authenticator to remove.
3. Click Remove, then click OK to confirm.

Note: Attempting to remove a JWT authenticator is not permitted if it is enabled on the selected connection server and removal fails if it is enabled on any of the other connection servers in the same cluster. Instead, an administrator must first disable the JWT authenticator on each of the connection servers, then remove them.