Enabling Remote Access for Governance Center

In order to set up access to the Governance Center for a remote instance, you need to change the following default configuration in the <GREG_HOME>/repository/conf/security/sso-idp-config.xml file.

<SSOIdentityProviderConfig>
    <TenantRegistrationPage>https://stratos-local.wso2.com/carbon/tenant-register/select_domain.jsp</TenantRegistrationPage>
    <ServiceProviders>
        <ServiceProvider>
            <Issuer>store</Issuer>
            <AssertionConsumerService>https://localhost:9443/store/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/store/login.jag</CustomLoginPage>
        </ServiceProvider>
        <ServiceProvider>
            <Issuer>social</Issuer>
            <AssertionConsumerService>https://localhost:9443/social/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/social/login</CustomLoginPage>
        </ServiceProvider>
        <ServiceProvider>
            <Issuer>publisher</Issuer>
            <AssertionConsumerService>https://localhost:9443/publisher/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/publisher/controllers/login.jag</CustomLoginPage>
        </ServiceProvider>
    </ServiceProviders>
</SSOIdentityProviderConfig>

Change the IP correctly in order to get this working for a remote instance. For example, if your IP is 192.168.53.54, the change for Publisher would look like the following:

<SSOIdentityProviderConfig>
    <TenantRegistrationPage>https://stratos-local.wso2.com/carbon/tenant-register/select_domain.jsp</TenantRegistrationPage>
    <ServiceProviders>
        <ServiceProvider>
            <Issuer>store</Issuer>
            <AssertionConsumerService>https://192.168.53.54:9443/store/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/store/login.jag</CustomLoginPage>
        </ServiceProvider>
        <ServiceProvider>
            <Issuer>social</Issuer>
            <AssertionConsumerService>https://localhost:9443/social/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/social/login</CustomLoginPage>
        </ServiceProvider>
        <ServiceProvider>
            <Issuer>publisher</Issuer>
            <AssertionConsumerService>https://192.168.53.54:9443/publisher/acs</AssertionConsumerService>
            <SignResponse>true</SignResponse>
            <CustomLoginPage>/publisher/controllers/login.jag</CustomLoginPage>
        </ServiceProvider>
    </ServiceProviders>
</SSOIdentityProviderConfig>

If you are running G-Reg with port offset, then you have to update the port value as well.