The post Help Center appeared first on SearchStax Docs.

SearchStax Cloud automatically secures your Solr search infrastructure with built-in industry-standard security measures at the cluster, network and dashboard levels.

Learn more about securing your Solr deployment:

• Change your password
• Two-Factor Authentication
• Single Sign-on – Okta
• Single Sign-on – OneLogin
• Single Sign-on – Azure
• Security Solr Deployments

The post Overview appeared first on SearchStax Docs.

There are multiple ways to change a password in SearchStax Cloud depending on context.

If you are locked out of your SearchStax account, use the password reset link on the login page.

If you are logged in to SearchStax, but need to change your password because it is about to expire, navigate to the User Preferences > Password page.

Users and passwords associated with the Solr Basic Auth feature can be managed from within SearchStax. Visit the Deployment Details page and open the Security > Auth page. The SearchStax admin can edit the Solr users and passwords from there.

As a footnote, it is also possible to set Solr Basic Auth passwords procedurally from the Searchstax Provisioning API.

The post Change Your Password appeared first on SearchStax Docs.

All SearchStax Cloud users have the option of enabling Two-Factor Authentication (2FA) using the Google Authenticator. Navigate to the User Preferences > Two-Factor Authentication tab.

The setup procedure is simple. Click the Set Up Google Authenticator button to generate the QR code on this screen:

Install the Google Authenticator app on your phone or tablet and use it to scan the QR code. Once the link to SearchStax is verified (which is almost instantaneous), the phone app begins to display six-digit numbers.

When you log into SearchStax, enter your email address and strong password as usual. SearchStax will open a field for your six-digit code. This code changes once each minute, so it is a very secure way to authenticate.

Note that SearchStax Cloud displays a screen of Backup Verification Codes that you can use if you lose your phone. We recommend that you store these codes in a safe place that isn’t on your phone.

You can also deactivate Two-Factor Authentication from the same User Preferences screen.

The post Two-Factor Authentication appeared first on SearchStax Docs.

SearchStax Cloud now offers the ability for customers to set up Single Sign-On (SSO) to let their users log into SearchStax apps with a single ID and password that works across multiple software systems.

We use the open standard Security Assertion Markup Language (SAML) to allow identity providers (IdP) to pass authorization credentials to service providers (SP). This page provides instruction to use Okta to implement SSO for SearchStax.

SSO is an add-on SearchStax feature that is purchased separately as part of the Security Pack. If you are interested in the Security Pack, please contact Sales.

Once SSO is enabled for your account and a domain is set up, the admin is able to see the configuration options in the User Preferences screen of the SearchStax Cloud Dashboard.

The following steps explain how it can be set up for Okta.

Instructions

Once your account has been enabled for SSO by the SearchStax team and a domain has been provided, the owner and/or admin can see the option to complete set up. This option is found in the User Preferences screen of the SearchStax Cloud Dashboard:

1. You need to be an Admin in Okta to set up the SearchStax Application.

2. Go to the Okta Admin Console. Click on Applications > “Create App Integration”. Select “SAML 2.0” and click on “Next”

3. Enter the name of the App as “SearchStax Cloud” and click on Next

4. Configure the SAML Settings with the following information:

• Set the “Single sign on URL” as the The Assertion Consumer Service URL provided in SearchStax Cloud
• Check on “Use this for Recipient URL and Destination URL”
• Set the “Audience URI”as the Metadata URL provided in SearchStax Cloud
• Set the “Name ID format” as “Unspecified”
• Set the “Application username” as “Email”
• Set the “Update application username on” as “Create and update”

5. Click on “Show Advanced Settings” and set “Response” and “Assertion Signature” to “Signed”. Below is a sample of Advanced Settings

*If you change the response and assertion settings, you will need to also change the SearchStax Cloud “Assertions responses signed*” setting to match.

6. The next section provides Attribute Statements for mapping Okta fields to SearchStax. Below are sample mappings that we defined

The above example assigns the role of “Admin” to all users in SearchStax Cloud. However, if you have a different field in Okta that maps the role, you can assign that field instead. Here is more information about roles in SearchStax Cloud. If a role is not specified, users will be provisioned with the “Team Member” role, which is a read-only role.

Click on Next.

7. Select “I’m an Okta customer adding an internal app” and click on “Finish”

8. Now click on the “View SAML setup instructions” button that is displayed to the right

9. Copy the “Identity Provider Single Sign-On URL” from the screen and set it as the Login url in SearchStax Cloud.

10. Copy the “Identity Provider Issuer” from the screen and set it as the Idp entity url in SearchStax Cloud.

11. Copy the XML shown in the Optional section with the title “Provide the following IDP metadata to your SP Provider” and host it on a URL (optionally, you can send it to us and we can host this for you). Copy this hosted IDP metadata URL and set it as the Metadata url in SearchStax Cloud.

12. Now, set SSO to “Enabled”.

When you are testing, also check “Allow email password login” (You can turn this off once SSO testing is complete). Here is our example setting page:

Once set up is complete, the “Your direct Sign-In URL” is the URL that your team can use for signing into SearchStax Cloud. They can also enter the domain name mentioned when choosing Single Sign-On from the SearchStax Cloud Sign-In page.

Login Using SSO

On https://app.searchstax.com/ , click the “Sign-In With your ID Provider” button.

Enter the domain.

Click Continue. This takes you to the Okta Sign-in page. After you authenticate, it brings you back to your SearchStax Cloud Dashboard.

Alternately, you can directly go to https://<Subdomain>.searchstax.com to login, and clicking on the “Sign-In With your ID Provider” will take you directly to Okta Sign In.

SSO + Two-factor Authentication

A User can have SSO and Two-Factor authentication both setup. The 2FA settings for a user will apply to all accounts that the user has access to.

However, for the account that has SSO Setup, while logging in, SearchStax 2FA settings will not apply. In that case, 2FA should be set up at the SSO Provider.

The post Single Sign-On – Okta appeared first on SearchStax Docs.

SearchStax Cloud now offers the ability for customers to set up Single Sign-On (SSO) using OneLogin to let their users log into SearchStax apps with a single ID and password that works across multiple software systems.

We use the open standard Security Assertion Markup Language (SAML) to allow identity providers (IdP) to pass authorization credentials to service providers (SP). This page provides instructions on how to configure OneLogin SSO with SearchStax.

SSO is an add-on SearchStax feature that is purchased separately as part of the Security Pack. If you are interested in the Security Pack, please contact Sales.

The following steps explain how it can be set up for OneLogin.

Instructions

Once SSO is enabled by SearchStax for your account, the owner and/or admin can see options to set it up. The options to set up SSO are in the User Preferences screen of the SearchStax Cloud Dashboard:

The first option is the Single Sign-On subdomain. This is a label like mycompany, which the system will use to build a URL such as mycompany.searchstax.com.

Click Next to view the next page of SSO parameters.

The “direct Sign-In URL” is the URL that your team can use for signing into SearchStax Cloud. The other two URLs are discussed below.

1. Go to OneLogin administration dashboard and select the Applications drop down. Select Add App in the top right corner:
   
2. Now Search for “SAML Custom Connector (Advanced)” and then select the application:
   
3. Enter a display name for the custom SearchStax application – something like “SearchStax”. Feel free to customize the icon as well then click Save in the top right corner:
   
4. This creates a new Application in your user dashboard. Now go back to the applications tab still inside the administration dashboard and select your newly created application. You will see some new tabs on the left. Select the Configuration Tab:
   
5. This tab is where you will configure the SSO application with the information provided in our SearchStax dashboard. Since we used “mycompany” as our subdomain we will continue to use that here as well. Enter the provided metadata URL in the Audience (EntityID) box
   
   
6. Enter the provided ACS URLs into the Recipient, ACS Validator, and ACS URL boxes:
   
7. Enter the Login URL into the Login URL Box:
   
8. Be sure your settings align with what is shown below. This will be SP initiated, with a Persistent nameID, and both the assertion and response will be signed, then click Save in the top right:
   
9. Select the Parameters tab on the left. We expect Email, First Name, and Last Name to be passed so your parameters should look like the box below. You also have the ability to pass a “role” parameter. If you do not have a mapping for SearchStax roles, you can leave it as it, and the users will get created with Team Member as the role by default. These roles can always be changed later from the SearchStax Dashboard:
   
   
10. Next click into the SSO tab on the left. Take note of the Issuer URL and the SAML 2.0 Endpoint.
    
    You will be putting these values in the SearchStax dashboard as shown below. Clilck Save Settings when finished:
    
    

The steps below show how we have integrated it with our OneLogin instance.

Login Using SSO

https://app.searchstax.com/ now provides a button at the bottom for SSO – “Sign-In With your ID Provider.” Click this button.

Enter the domain that was set up for the client.

Click Continue. This takes you to OneLogin Sign-in page. After you authenticate, it brings you back to your SearchStax Dashboard.

Alternately, you can directly go to https://<Subdomain>.searchstax.com to login, and clicking on the “Sign-In With your ID Provider” will take you directly to OneLogin.

SSO + Two-factor Authentication

A User can have SSO and Two-Factor authentication both setup. The 2FA settings for a user will apply to all accounts that the user has access to.

However, for the account that has SSO Setup, while logging in, SearchStax 2FA settings will not apply. In that case, 2FA should be set up at the SSO Provider.

The post Single Sign-On OneLogin appeared first on SearchStax Docs.

SearchStax Cloud now offers the ability for customers to set up Single Sign-On (SSO) to let their users log into SearchStax apps with a single ID and password that works across multiple software systems.

We use the open standard Security Assertion Markup Language (SAML) to allow identity providers (IdP) to pass authorization credentials to service providers (SP). We use Microsoft Azure Active Directory to implement SSO for SearchStax.

SSO is an add-on SearchStax feature that is purchased separately as part of the Security Pack. If you are interested in the Security Pack, please contact Sales.

The following steps explain how it can be set up for Microsoft Azure Active Directory.

Instructions

Once SSO is enabled by SearchStax for your account, the owner and/or admin can see options to set it up. The options to set up SSO are in the User Preferences screen of the SearchStax Cloud Dashboard:

The first option is the Single Sign-On subdomain. This is a label like mycompany, which the system will use to build a URL such as mycompany.searchstax.com.

Click Next to view the next page of SSO parameters.

The “direct Sign-In URL” is the URL that your team can use for signing into SearchStax Cloud. The other two URLs are discussed below.

1. Go to Azure Active Directory. Select Enterprise Applications, and then click on “New Application.”
2. Now Click on “Create your own application.”
3. Enter a name for SearchStax application – say “SearchStaxManagedSolr”, and select the last dropdown “Integrate any application you don’t find in the gallery” and then click on the “Create” button.
4. This creates a new Enterprise Application. In the screen that appears, click on the link for Step 1 > Assign Users and Groups. Here you can assign which Users/Groups have permission to SearchStaxManagedSolr Enterprise Application.
5. Click on “Add user/group” and then follow up to add all the users of groups that you would like to grant access to.
6. Once you are done with Step 1, click on the “Get started” link for Step 2. Setup single sign on.
7. Now select the single sign-on method as “SAML.”
8. It now shows the screen to configure the SAML enpoints:
9. Click on Edit on Step 3, and change Signing Option as “Sign SAML assertion” and click “Save.” The option can be anything else too, but the same setting should then also be chosen in the SearchStax Dashboard in the SSO settings.
10. Click on Edit button for Step 1 > Basic SAML Configuration.
    1. Enter the “Metadata URL” that shows on your https://app.searchstax.com/admin/sso/configure/saml2/ page as Identifier (Entity ID). Remove any extra entries and make sure the “default” checkbox is checked.
    2. Enter the Assertion Consumer Service URL as the “Reply URL” as shown below.
    3. Click “Save.”
11. Set up Step 2 > User Attributes & Claims. Click on Edit.
12. SearchStax has roles defined. If your active directory has a field containing a mapping for those roles, click on “Add new claim” and assign “role”. If you do not have a mapping for SearchStax roles, you can leave it as it, and the users will get created with Team Member as the role by default. Those can always be changed later from the SearchStax Dashboard.
    
    As just an example, we are mapping user.jobtitle field as the “role” as shown below.
    
    The Unique User Identifier (Name ID) should be mapped to your active directory field that is the email for the users that will use SearchStax. In our case, the default user.userprincipalname contained the information.
13. Now back on the SearchStax dashboard…
    1. Set the “Metadata url” as the “App Federation Metadata Url” shown in Step 3.
    2. Set the “Login Url” as the “Login URL” shown in Step 4.
    3. Set the “Logout Url” as the “Logout URL” shown in Step 4.
    4. Set the “Idp Entity Url” as the “Azure AD Identifier” shown in Step 4.

Below steps show how we have integrated it with our Azure Active Directory.

Login Using SSO

https://app.searchstax.com/ now provides a button at the bottom for SSO – “Sign-In With your ID Provider.” Click this button.

Enter the domain that was set up for the client.

Click Continue. This takes you to Azure Sign-in page. After you authenticate, it brings you back to your SearchStax Dashboard.

Alternately, you can directly go to https://<Subdomain>.searchstax.com to login, and clicking on the “Sign-In With your ID Provider” will take you directly to Azure Sign In.

SSO + Two-factor Authentication

A User can have SSO and Two-Factor authentication both setup. The 2FA settings for a user will apply to all accounts that the user has access to.

However, for the account that has SSO Setup, while logging in, SearchStax 2FA settings will not apply. In that case, 2FA should be set up at the SSO Provider.

The post Single Sign-On Azure AD appeared first on SearchStax Docs.

SearchStax Cloud offers the following Solr releases for self-service deployments.

The list below was derived from the Create Deployment dialog box of the SearchStax Dashboard, which naturally takes precedence over this help page.

9.1.1
8.11.2 - Recommended
8.11.1
8.8.2
8.8.1
8.6.3
8.4.0
8.3.1
8.2.0
8.1.1
7.7.2 - Recommended 
7.6.0
7.5.0
7.3.1
7.2.1
6.6.6 - Recommended
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
6.4.2
6.2.0
5.5.5

SearchStax reserves the right to modify this list at any time.

SearchStax does not force clients to upgrade. We continue to support clients whose Solr versions are now considered obsolete.

Premium Customers (Gold, Platinum or Platinum Plus) may request Solr versions that are not on this list.

Specific versions of Solr are compatible with specific versions of Sitecore. See Sitecore’s Solr Compatibility Table for further information.

Minor-version upgrades are easy to perform. Major-version upgrades are not difficult, but require schema modifications. This forces you to reload your data.

The post Solr Versions appeared first on SearchStax Docs.

SearchStax Cloud is available on AWS, Azure and Google Cloud in over 60 regions. This page lists all Solr hosting cloud deployment options currently available to SearchStax Cloud customers.

For more information, Contact Us.

AWS Regions

Get highly available, fast and scalable Solr on AWS with SearchStax SearchStax Cloud. Customers with Silver (free) support may choose from these Amazon Web Service (AWS) regions:

• Africa (Cape Town)
• AAsia Pacific (Hong Kong)
• Asia Pacific (Mumbai)
• Asia Pacific (Seoul)
• Asia Pacific (Singapore)
• Asia Pacific (Sydney)
• Asia Pacific (Tokyo)
• Canada (Central)
• EU (Frankfurt)
• EU (Ireland)
• EU (London)
• Middle East (Bahrain)
• South America (São Paulo)
• US East (N. Virginia)
• US East (Ohio)
• US West (N. California)
• US West (Oregon)

Premium clients have access to all AWS regions.

Azure Regions

Get highly available, fast and scalable Solr on Microsoft Azure with SearchStax SearchStax Cloud. Customers with Silver (free) support may choose from these Azure regions:

• Australia Central (Canberra)
• Australia East (New South Wales)
• Australia Southeast (Victoria)
• Brazil South (Sao Paulo State)
• Canada Central (Toronto)
• Canada East (Quebec City)
• Central India (Pune)
• Central US (Iowa)
• East Asia (Hong Kong)
• East US (Virginia)
• East US 2 (Virginia)
• France Central (Paris)
• France South (Marseille)
• Germany West Central (Frankfurt)
• Germany North (Berlin)
• Japan East (Tokyo, Saitama)
• Japan West (Osaka)
• Korea Central (Seoul)
• Korea South (Busan)
• North Central US (Illinois)
• North Europe (Ireland)
• Norway East (Oslo)
• Norway West (Stavanger)
• South Africa North (Johannesburg)
• South Central US (Texas)
• South India (Chennai)
• Southeast Asia (Singapore)
• Switzerland North (Zurich)
• Switzerland West (Geneva)
• UAE North (Dubai)
• UK South (London)
• UK West (Cardiff)
• West Central US (Wyoming)
• West Europe (Netherlands)
• West India (Mumbai)
• West US (California)
• West US 2 (Washington)
• West US 3 (Arizona)

Premium customers have access to most Azure regions. Please contact the SearchStax Support Desk if you need an Azure region that isn’t in the list above.

Google Cloud Regions

Get highly available, fast and scalable Solr on Google Cloud with SearchStax SearchStax Cloud. Customers with Silver (free) support may choose from these Google regions:

• Asia Pacific (Mumbai)
• Asia Pacific (Singapore)
• Asia Pacific (Sydney)
• Asia Pacific (Tokyo)
• EU (Belgium)
• EU (Frankfurt)
• EU (London)
• North America (Montréal)
• North America (Toronto)
• South America (Sao Paulo)
• US Central (Iowa)
• US East (N. Virginia)
• US East (South Carolina)
• US West (California)
• US West (Oregon)

Customers who have purchased premium support have access to all Google Cloud regions.

Questions?

Do not hesitate to contact the SearchStax Support Desk.

The post Cloud Regions appeared first on SearchStax Docs.

Overview

SearchStax Cloud provides various APIs for supporting the creation, deletion, and management of Solr deployments.

Learn more about SearchStax Cloud APIs:

• Authentication API
• Users API
• Basic Auth API
• IP Filtering API
• Deployment API
• Private VPC API
• DNS Alias API
• Backup/Restore API
• Custom JARs API
• Tags API
• Alerts API
• Webhooks API
• Zookeeper API

SearchStax Cloud Deployments also support custom JAR files to add custom analyzers, tokenizers, query parsers and other plugins for Solr deployments. Learn more about custom JAR files for SearchStax Cloud.

Questions?

Do not hesitate to contact the SearchStax Support Desk.

The post Overview appeared first on SearchStax Docs.