In order to set up access to the Governance Center for a remote instance, you need to change the following default configuration in the <GREG_HOME>/repository/conf/identity/sso-idp-config.xml
file.
<SSOIdentityProviderConfig> <TenantRegistrationPage>https://stratos-local.wso2.com/carbon/tenant-register/select_domain.jsp</TenantRegistrationPage> <ServiceProviders> <ServiceProvider> <Issuer>store</Issuer> <AssertionConsumerService>https://localhost:9443/store/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/store/login.jag</CustomLoginPage> </ServiceProvider> <ServiceProvider> <Issuer>social</Issuer> <AssertionConsumerService>https://localhost:9443/social/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/social/login</CustomLoginPage> </ServiceProvider> <ServiceProvider> <Issuer>publisher</Issuer> <AssertionConsumerService>https://localhost:9443/publisher/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/publisher/controllers/login.jag</CustomLoginPage> </ServiceProvider> </ServiceProviders> </SSOIdentityProviderConfig>
Change the IP correctly in order to get this working for a remote instance. For example, if your IP is 192.168.53.54, the change for Publisher would look like the following:
<SSOIdentityProviderConfig> <TenantRegistrationPage>https://stratos-local.wso2.com/carbon/tenant-register/select_domain.jsp</TenantRegistrationPage> <ServiceProviders> <ServiceProvider> <Issuer>store</Issuer> <AssertionConsumerService>https://192.168.53.54:9443/store/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/store/login.jag</CustomLoginPage> </ServiceProvider> <ServiceProvider> <Issuer>social</Issuer> <AssertionConsumerService>https://localhost:9443/social/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/social/login</CustomLoginPage> </ServiceProvider> <ServiceProvider> <Issuer>publisher</Issuer> <AssertionConsumerService>https://192.168.53.54:9443/publisher/acs</AssertionConsumerService> <SignResponse>true</SignResponse> <CustomLoginPage>/publisher/controllers/login.jag</CustomLoginPage> </ServiceProvider> </ServiceProviders> </SSOIdentityProviderConfig>
If you are running G-Reg with port offset, then you have to update the port value as well.