Intrexx Mobile App

The Intrexx Mobile App is available in the following stores: The following provides a description of the app and its functions.

1. Connect to portal server


Address

Enter the address of your portal here. You need the corresponding permissions, and a VPN access where appropriate, to connect to the portal server. Click here for more information about using VPN apps. If the portal is an HTTPS portal with a self-signed certificate, then this needs to be installed on the mobile device. Click here for more information about installing the certificates.

Connect

The connection to the portal server is established with this button.

2. Register portal




You can register a portal on your device on this page. The possible authentication methods are: Technical modifications need to be performed for other authentication methods. Click here more information about this.

Username / Password

Enter the username and password here.

Domain

Where appropriate, enter the required domain here.

Log in

This button performs the login.

3. Enable notifications


Enable

With this button, you will receive notifications from the portal. These are sent automatically using the push notification action in processes.

Disable

The portal will not any notifications to the current mobile device.

4. Homepage - Portal overview




The registered portals are listed here.

Navigation bar

You can reach the settings via the menu button on the left-hand side of the navigation bar. Click on "Intrexx" to open the notification overview. If there are notifications for these portals, the number of unread notifications for all portals will be shown next to the "Intrexx" link. The registration page will open when you press the button on the right-hand side in the navigation bar.

Portal list

The overview of the notifications for the current portal is opened via the globe symbol. If there are notifications for a portal, the number of unread notifications for the respective portal will be shown next to the symbol. If you click on the portal name, the homepage of the corresponding portal will open in the portal browser. If you swipe left on a portal name, the options for this portal will be shown.

Settings

Loads the portal settings.

Deletes

Deletes the registration of the portal.

5. Notification overview for all portals




Notifications from all portals are shown on this page. "Today" displays messages from today, "All" displays all notifications. The notifications are grouped together per portal in the notification list. Read notifications are greyed out. A notification can be deleted via the delete button to its right. By pressing the delete button to the right of a portal name, all notifications for that portal will be deleted. Click on a notification to open the corresponding page in the portal browser.

6. Notification overview for the current portal




Notifications from the current portal are shown on this page. "Today" displays messages from today, "All" displays all notifications. Read notifications are greyed out. A notification can be deleted via the delete button to its right. Click on a notification to open the corresponding page in the portal browser.

7. Portal browser




You can navigate through your Intrexx portal in the portal browser. The navigation bar contains two buttons at the top left for going forwards and backwards through the portal. The close button in the navigation bar closes the portal browser.

8. Settings




You can reach this page via the homepage.

8.1. Personal settings

Background image




You can select a different background image here.

Intrexx images




You can select a pre-designed image for the background here.

My Photos / Camera




You can choose an image stored on your mobile device or take a new picture with the camera.



You can choose a theme (white / black) for camera images.

8.2. General

Help

Opens the Online Help in an external browser.

General terms and conditions




Opens the general terms and conditions

Imprint




Displays the imprint

8.3. Extended

Delete cookies

All cookies in the portal browser are deleted.

Set to default

Resets all settings to the default settings

Version number

Displays the version number.

9. Portal settings




You can reach this page via the homepage by swiping left on a portal name in the list. The address of the current portal is shown here. Furthermore, you can enable or disable notifications for this portal.

Apeparance when only one portal is registered




If you have only registered one portal, you can also select a homepage for the Intrexx App here. Press "Homepage" to load the options list for the homepage.



You can choose between the portal overview, the notification list for all portals or to open the portal directly in the portal browser here.

10. Install certificates

Android

The certificate can be installed in the Mobile Device Management (MDM) by your system administrator or manually via the smartphone's memory. To install the certificate manually, it needs to be on the smartphone as a .pem file. Proceed as follows:
  1. Move the .pem file to the download folder of the smartphone.
  2. Open the Android settings of the smartphone.
  3. Select the menu Security / Credential storage / Install from phone storage / SD card.
  4. Navigate to the directory where certificate file is stored, and then open it.
  5. When asked, enter the PIN of your device.
  6. Afterwards, provide the certificate with a name of your choice.
You can check whether the certificate was installed successfully by going to Security / Credential storage / Trusted credentials / Users. You certificate with the name of the organization used in the certificate should be shown here.

The names of the menu items may vary depending on the Android version.

Another option is per download: Provide the certificate as a download and allow users to download it to their smartphone using their browser. The certificate can be installed by clicking on the certificate or via "Settings" in your smartphone.

iOS

The certificate can be installed in the Mobile Device Management (MDM) by your system administrator or manually via the smartphone's memory. To install the certificate manually, it needs to be on the smartphone as a .pem file. Proceed as follows:
  1. Open the stored certificate to access the configuration profile.
  2. You can install the certificate in the configuration profile.
  3. When asked, enter the PIN of your device.
  4. Activate the certificate via Settings / General / About / Certificate Trust Settings.
You can view the installed certificate under Settings / General / Profile.

11. Using VPN apps (iOS, Android)

On the connection page of the Intrexx Mobile App, you can connect to the Intrexx portal server by entering the portal address. Before doing this, you should make sure that you have the corresponding permissions to access the server. In some cases, you may need VPN access. Please contact your system administrator if this is the case. The VPN access can be set up as follows:
  1. The access is installed automatically by your system administrator using an MDM
  2. The access is stored manually in the system settings of your device
  3. The access is registered using a VPN application
The VPN connection must be available before you can access the portal. The connection can be created with a VPN app of your choice. Some VPN apps allow themselves to be started by another app. These can be started by the Intrexx app directly. Here is a list of supported VPN apps (with reservations): In some cases, the access must be created manually before starting the portal. This is done by opening the VPN app and registering or starting the connection, respectively.

12. Authentication - Technical modifications

If you are using the Intrexx authentication, modifications concerning authentication are not required. Register the portal in the Intrexx Mobile App using its HTTPS URL and log in with your Intrexx username and password.

Minor modifications need to be made to portals that operate with user authentication against an Active Directory so that the Intrexx Mobile App can access them. The SSL certificate of the LDAP server needs to be imported in the portal properties, if the server is available under encryption via the LDAPS protocol at port 636. This is not required if it listens without encryption via the LDAPS protocol at port 389.

Now, add another authentication module to the file "lucyAuth.cfg" in the portal directory /cfg. Correct the provider URL of the Active Directory server accordingly and copy the entire section into the lucyAuth.cfg, for example at the end of the file.
IntegratedMobileAuth
{
	de.uplanet.lucy.server.auth.module.integrated.IntegratedLoginModule sufficient
		debug=false;

	de.uplanet.lucy.server.auth.module.ldap.LdapBindLoginModule sufficient
		java.naming.provider.url="ldaps://example.domain:636"
		java.naming.security.authentication="simple"
		java.naming.security.principal="$[DN]"
		debug=false;

	de.uplanet.lucy.server.auth.module.anonymous.AnonymousLoginModule sufficient
		debug=false;
};
If the connection to the Active Directory server via LDAP is not encrypted, modify the provider URL accordingly. Usually, the port 389 is used.

Add the name of the new authentication module (IntegratedMobileAuth) to the binding scope "web" in the file "om.cfg" in the portal directory /cfg:
<binding scope="web" auth-type=" IntegratedMobileAuth"/>
If the authentication should take place against an Active Directory, the call needs to be HTTPS encrypted via a virtual directory on the web server without Windows authentication (anonymous authentication). The superordinate paths need to be activated under the ASP settings.

Afterwards, restart the portal service. In both scenarios, we expect encrypted connections via SSL/TLS for security reasons.

Both Intrexx Mobile App users and users who access the portal via a desktop browser can now log in to the portal with their Active Directory user and password.

If you want desktop users to be able to log in via Integrated Windows Authentication, please read our Advanced Techniques workshop - Mixed authentication.

Officially signed certificate

If you are already using an officially signed certificate, you can now enter the URL of your Intrexx portal in the app. If the connection request functions, you will be asked to authenticate yourself. If you use a self-signed certificate, a configuration file with the full certificate string needs to be stored on the end device. So that the self-signed certificate can be trusted, the respective end device needs to the know the string of the CA certificate. You need to pack the certificate of this string into a profile with corresponding software (e.g. via Apple Configurator2 or Airwatch). This then needs to be installed on the devices. The self-signed certificate must not be contained in the profile. Please note that when accessing the portal from outside the company network, that a mobile VPN client will be required.

13. Register API key

The API key for receiving Push notifications from the portal on the mobile device, can be requested by registered customers in the United Planet Support Center. Enter this key in the Tools module.

14. Troubleshooting / FAQ

Why is my portal not available?

Possible solutions:

Why cannot I log in?

Possible solutions:

Why am I not receiving push notifications?

Possible solutions:

iOS: I have received a push notification but I do not see it in the app.

Possible solution:

I have selected a desktop layout via the mobile layout switch and cannot switch back to the mobile layout.

Possible solution:

Why do I receive push notifications even though the portal has been deleted.

Possible solution:

When I click on a push notification, the target page does not open but the login page of the Intrexx portal instead.

Possible solution:

15. More information

Settings in the Tools module