4. Management interface

The Management UI is the web-based interface for administering Nubus for UCS. For general information about the Management UI in Nubus, see Management UI in Nubus Manual 1.x [4].

This chapter covers configuration tasks for technical administrators who need to control how users sign in, manage licenses, and customize the appearance of the web interfaces.

Authentication

Configure how users sign in to the Portal and the Management UI. This includes session timeout settings, single sign-on with SAML or OpenID Connect, and how to restore standard sign-in if needed. See Authentication.

License management

View, activate, and manage the Nubus for UCS license. The license controls access to Univention App Center and defines capacity limits for users and clients in your domain. See Activate UCS license.

Web interface themes

Switch between the built-in light and dark themes, or create a custom theme to match your organization’s branding. See Customize web interface themes.

Cookie consent banner

Inform users about the use of cookies by enabling a consent banner in the UCS Portal and Management UI. Configure its title, text, and the domains it applies to using UCR variables. See Consent for using cookies.

Delegated administration

Control which management modules specific groups or users can access by creating and assigning UMC policies with selected operation sets. See Delegated administration for management modules.

Directory reports

Create predefined reports for users, groups, and computers directly from the management modules or the command line. Customize the report output by replacing the logo or registering new report templates. See Directory reports.

Hardware information

Submit hardware and system information to Univention for compatibility tracking or as part of a support request. See Hardware information.

Contents

• 4.1. Authentication
  • 4.1.1. Sign-in
    • 4.1.1.1. Choose the right user account
    • 4.1.1.2. Change Nubus web session timeout
  • 4.1.2. Refresh browser tabs on sign-out
  • 4.1.3. Single sign-on
    • 4.1.3.1. SAML configuration for single sign-on
      • 4.1.3.1.1. Activate SAML for single sign-on
      • 4.1.3.1.2. Update the default login tile in the Portal
      • 4.1.3.1.3. Restore login without single sign-on
    • 4.1.3.2. OpenID Connect for single sign-on
      • 4.1.3.2.1. Activate OpenID Connect for single sign-on
      • 4.1.3.2.2. Create sign-in links
      • 4.1.3.2.3. Verification and log files
      • 4.1.3.2.4. Deactivate OpenID Connect for single sign-on
      • 4.1.3.2.5. Identity provider with non-standard FQDN
      • 4.1.3.2.6. Non-standard FQDN for the Univention Portal and Management UI
      • 4.1.3.2.7. Back-channel sign-out
• 4.2. Activate UCS license
  • 4.2.1. About UCS licenses
    • 4.2.1.1. Core Edition license
    • 4.2.1.2. Subscription license
  • 4.2.2. View license information
  • 4.2.3. Activate a license
  • 4.2.4. Register for a personalized Core Edition license
  • 4.2.5. License key limits
• 4.3. Customize web interface themes
  • 4.3.1. Switch light and dark theme
  • 4.3.2. Create a custom theme
• 4.4. Consent for using cookies
  • 4.4.1. Configure the cookie consent banner
  • 4.4.2. UCR reference for cookie consent banner
• 4.5. Delegated administration for management modules
  • 4.5.1. How delegated administration works
  • 4.5.2. Built-in UMC operation sets
  • 4.5.3. LDAP access rights
  • 4.5.4. Group access to management modules
    • 4.5.4.1. Prerequisites
    • 4.5.4.2. Create a UMC policy
    • 4.5.4.3. Assign the policy to a group
• 4.6. Directory reports
  • 4.6.1. Create reports through management modules
  • 4.6.2. Create reports on the command line
  • 4.6.3. Customize reports
• 4.7. Hardware information