1. Upon launching the AMI several scripts will run to configure the instance. By default, it is setup to listen on port 443 for DF and port 8443 for the identity provider (Keycloak) using the public DNS hostname provided by AWS:
2. The instance ID will be the default password for both your keyadmin and madmin default accounts. Both should be reset to unique values. When browsing to the public DNS, you will be presented with the MDACA login page:
3. The TLS certificate that comes with the AMI is self-signed. There are instructions below for updating DF with your own TLS certificate. When first accessing the AMI, you will need to press proceed on the certificate error screen to login.
4. You can login with madmin as your username and the instance ID as your password. The madmin has access to all of the functionality and settings within DF. It can also be used to configure your users, and groups. For more information on DF administration, please visit our guide: DF Documentation
User management can be performed through Keycloak by logging in to https://public-hostname:8443/auth using keyadmin and your instance ID as your password. Keycloak can be federated with an existing enterprise IdP, synced with LDAP, and utilize Kerberos authentication. For more information please see the Keycloak documentation here: https://www.keycloak.org/documentation
