What does the AGS Management tab show; how are a vService's AGS settings edited from it?

Short answer

AGS Management is the tab that summarizes the AGS configuration of an AGS-enabled vService in plain sentences instead of form fields: the working mode and the scope, the login flow (Sign-in Flow), the session (Session), brute force and bot protection (Protection), the portal section of the mode, the page appearance and the languages (Presentation & Language), and the notification and audit record (Monitoring & Notification) are read section by section. It does not show runtime data; the measurements are on the Dashboard and Live Stats tabs. The Edit link in the title strip of each section opens the AGS configuration form only with the fields of that section, in the Edit / <section> window; with Accept, only these fields are saved. The Edit link of the Sign-in Flow section, however, does not open a window; it switches to the Flowchart tab, where the flow is edited. The Edit links are visible to users who have modify permission in the Load Balancer area.

How Does It Work?

The screen is a reading surface: the AGS record of the vService and the policy, provider and profile records this record refers to are turned into sentences that describe the current state of each setting; the screen refreshes itself the moment the record changes. The sections are arranged in a fixed order (differences according to the gateway mode):

Section	What it describes	Fields opened in the Edit window
Mode section (its title is the name of the mode: Standalone Application, Portal or Portal Application)	Which requests go through AGS, the path of the login pages; below them, the flow strip that counts the login flow with the Entry, Authentication, Second Factor and Outcome stages	Edit / Scope & identity: AGS Activation Condition, AGS Root Path, Gateway Mode; in Portal mode also Portal URL, Private Tunnel Domain, Portal Applications, and in Portal Application mode Trusted Portals
Sign-in Flow	The providers that verify the identity, the second factor, the attributes written to the session and the Backend SSO profile, if there is one	No window opens; the Flowchart tab opens in Edit Mode
Session	What the session is bound to, the timeouts, the concurrent session limit and the cookie domain	Edit / Session: Session Protection Policy, Cookie Domain, Cookie Name Prefix
Protection	The sentences of the Bot Protection and Account Lockout policies	Edit / Protection: Bot Protection Policies, Default Lockout Policies
Portal & Applications (only in Portal mode)	The table of the published applications	Edit / Portal & applications: Portal URL, Private Tunnel Domain, Portal Applications
Trusted Portals (only in Portal Application mode)	The portals whose session is trusted	Edit / Trusted portals: Trusted Portals
Presentation & Language	The languages of the pages, the number of customized texts and the template items	Edit / Presentation & language: Dictionary, Page Template
Monitoring & Notification	The notification thresholds, the engine status alarm and the destinations to which the audit record is forwarded	Edit / Monitoring & notification: Log Level, Audit Log Forwarders, Notification Profile

The color of the sentences also carries information: a red phrase shows a penalty action (deny, block, locked), an amber phrase a challenge or a weakened state (show a captcha, not bound to any identity), and a completely amber sentence a missing configuration that affects access (e.g. The flow has no authentication step) (reading the sentences). The row of a setting that is not defined is written too (e.g. Concurrent sessions are not limited); the row or the section of a setting that cannot be applied in that mode, however, is not written at all.

Editing a Section

1

Adım 1 Open the AGS Management tab

In the Left Monitor Panel, AGS-Enabled vServices is selected from the category tabs at the top left, the vService is clicked and, on the screen that opens, the AGS Management tab is opened (accessing the screen).

2

Adım 2 Click the Edit link of the section

The Edit text in the bottom right corner of the title strip of the section to be changed is clicked. The window opens with the Edit / <section name> title, only with the fields of that section. In the Sign-in Flow section and with the Flow Editor → link in the mode section, no window opens; the flow is edited in Edit Mode on the Flowchart tab.

3

Adım 3 Edit the fields

The fields in the window are changed. In the window of the mode section, when Gateway Mode is changed, the portal fields that depend on the mode appear or disappear immediately.

4

Adım 4 Save

The Accept button is clicked. Only the fields of this window are written over the current state of the record; the changes made to the other fields are preserved. If the window is closed, nothing is written.

If a setting of the policy, provider or profile itself is to be changed, the icon at the end of the record name in the sentence opens the quick view of the record (with the Go to Page and Edit buttons), and the icon opens the edit window of the record itself (inline icons). The pencil icon is not present in the built-in AGS records. This change affects all the vServices that use that record.

AGS Management in TR7

	AGS Management section window	Flowchart → General Settings window
Fields opened	Only the fields of that section	All the AGS settings outside the flow, in five sections (General Settings)
Saving	Saved immediately with Accept	Accept transfers the values to the diagram; for them to become permanent, Save on the Flowchart toolbar is required
Login flow	Not edited	The flow is edited in the Edit Mode of the same tab

• Permission: The Edit links are visible to users who have modify permission in the Load Balancer area; there is no separate permission specific to AGS. A user without the permission sees the sections, the sentences and the tables in full (scope and limits).
• Mode change: When Gateway Mode is changed and saved in the window of the mode section, the Portal URL, Private Tunnel Domain, Portal Applications or Trusted Portals values that become invalid in the new mode are removed from the record.
• Cookie and tunnel domain: In Portal mode, if Private Tunnel Domain is defined, the Edit / Session window opens with an information box saying that this domain must stay under the Cookie Domain that is to be entered.

Common Misconceptions

• "AGS Management is a monitoring screen." No color or row on the screen depends on the running state of the AGS engine or of the vService; runtime data is on the Dashboard, Live Stats, Sessions, Lockout and Engine tabs.
• "The login flow is also edited on this screen." The flow is edited only on the Flowchart tab; this screen counts the steps of the flow according to their roles and does not show the branches or the transitions.
• "In a section window, Save is needed separately after Accept." The section windows save directly with Accept. The one that needs a separate Save is the General Settings window on the Flowchart tab.
• "The pencil icon in the sentence changes the setting of this vService." The pencil icon opens the form of the policy or the profile itself; the change is reflected in all the vServices that use that record. To change only which policy this vService uses, the Edit link of the section is used.

How it is done in the documentation

• AGS Management · What Is AGS Management?
• AGS Management · Edit Link
• AGS Management · The Differences According to the Gateway Mode
• AGS Management · Scope and Limits

Related questions

• Which monitoring screens does AGS have; what does each one show?
• What is the Flowchart; which step types does an AGS flow consist of?
• What is Gateway Mode; what is the difference between Standalone Application, Portal and Portal Application?
• What are the basic building blocks of AGS?