ARTIFACTORY: Setup Access Federation Step-by-Step

Relevant for Artifactory 7.x

This article provides a comprehensive guide on setting up the Access Federation feature in Artifactory. We will walk you through the step-by-step process to configure and enable Access Federation. Follow the instructions below to successfully set up the Access Federation feature:

Step 1: Enable Mission Control

In order to enable the Mission Control in the Artifactory instance, you need to add the following values in the system.yaml file [located under the $JFROG_HOME/artifactory/var/etc].
 

mc:
    enabled: true

After adding the above values in the system.yaml file, restart Artifactory for the change to apply.

After performing a restart, if you navigate to the Artifactory UI, you will notice a new tab called Platform Deployment [Artifactory UI -> Administration] as shown in the screenshot below-

Step 2: Adding JPD and creating Circle of trust 

Adding JPD

After Mission Control was enabled successfully, you may now register the JPDs. For that, navigate to the Administration-> Platform Deployment -> Registered JPDs section and click on New Platform Deployment. 



Fill in all the details and add the Pairing token generated in the destination Artifactory, to register the JPD. For more information on how to create a pairing token, please refer to our Generating Pairing Tokens Wiki page.



After adding all the details, save the changes and you may see the JPD added successfully. 



Establishing Circle of trust: 

In order to establish the circle of trust between both the Artifactory nodes, you will need to exchange the root.crt between the services. 

In order to do so, go to $JFROG_HOME/artifactory/var/etc/access/keys, copy the root.crt and add it to the other Artifactory node’s $JFROG_HOME/artifactory/var/etc/access/keys/trusted folder. Repeat this process with the second Artifactory node.

Please Note: After adding the root.crt in the $JFROG_HOME/artifactory/var/etc/access/keys/trusted folder, the certificates will disappear and be placed in the Artifactory database.
For more information on Circle of Trust, please refer to our How To Establish a Circle of Trust wiki page.

Step 3: Configuring Access Federation Topologies 

To configure the Access Federation Topologies, go to the Artifactory UI -> Administration -> User Management -> Access Federation and click Apply Topologies. 




The Apply Topologies will expand to two options - Star Topology and Mesh Topology. Select the topology as per the requirement. 

Below is an example of star topology: 

Select the Platform deployment
 


Select the entity type - by default all will be selected 



Select summary, verify and click to finish. 

You may observe a pop up message as mentioned in the below screenshot which will indicate that the Access Federation configuration is successful.



Also, you may review this video here to further guide you on how to configure between Artifactory instances using Access Federation.

For more information, you can refer to our page here which further explains about Access Federation.