--- title: Install Anywhere slug: install-anywhere createdAt: 2025-10-16T21:18:18.914Z --- # **Activate Anywhere** extends the Activate platform for secure access from the internet. # Prerequisites ## Core Dependencies | **Requirement** | **Description** | | -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Activate Installed** | Activate must be installed, configured, and operational. | | **Activate Configuration** | Activate may require configuration to support Anywhere (e.g., enable API access, register service endpoints, align authentication mode). | | **SSL Certificate** | Valid SSL certificate matching the Anywhere hostname (anywhere.company.com). Can be CA-issued or self-signed for testing. | | **Application** | Activate must be configured with an application used to authenticate users. Refer to [Identity and Infrastructure Deployment Models](docId\:WxUbdgFFvYe9lq9KcOFZh) | ### Architecture Options -------------------- Two options are available - **Standalone on a DMZ host** (recommended for security isolation), see [Anywhere Standalone Server Requirements](docId:8TqEqum2s2HSuZrpuypWY) - **On the same server as Activate** (for smaller or non-production environments). ## Authentication Options Anywhere supports two authentication modes: | **Option** | **Description** | **Use Case** | | ----------------------------------------------- | ----------------------------------------------------------- | ---------------------------------------- | | **Azure OAuth Authentication ***(default)* | Integrates with Entra ID (Azure AD) via OAuth 2.0 | Cloud / Hybrid deployments requiring SSO | |
**Secure Cookie Based Authentication** | Uses Activate’s built-in authentication and session cookies | Internal or trusted environments | | **Octa? Other providers?** | | | :::hint{type="info"} The installer will detect missing prerequisites and alert you, but it does not install them automatically. ::: ## Prepare for Install 1. Verify you can access the Activate Portal/API from the Anywhere host. 2. Confirm the SSL certificate is installed under **Local Computer → Personal**, including its private key. 3. Record the certificate **thumbprint** or **subject name** for IIS binding. 4. Ensure port 443 is available on the Anywhere web server. 5. Enable Windows Authentication temporarily on the Activate server. # Activate Configuration - Configure Remote Access Configure Activate to accept Anywhere connections 1. Open Activate Studio on the Activate Server 2. Browse to Configuration > External Web and open the RemoteAccess parameter 3. Configure these values on the authentication node, other authentication nodes should be removed or commented out. | Configuration Node | Value | | ---------------------------- | -------------------------------------------------------------------------------------------------------- | | authentication/provider | azure | | authentication/applicationID | =//Resources/ActiveDirectory/External Directories/Azure/ApplicationIDLogin | | authentication/tenantName | =//Resources/ActiveDirectory/External Directories/Azure/TenantName | | authentication/redirectURI | Must match redirect URI configured on the application registration of the ApplicationIDLogin application | 4. Restart Activate App pool # Install Anywhere Components These steps will guide you through running the installer to create a new Anywhere instance to connect to your Activate server. :::hint{type="info"} Depending on the security settings of the server, it is sometimes necessary to run the installation as the server administrator. ::: 1. Launch the **Activate Installer** 2. Select **Activate Anywhere **tile as the Install Type 3. Click the **Create New Instance** button 4. Fill the following fields on the **Connect... **dialog - **Instance Name** – Friendly name identifying the Activate instance. - **Server Path** – HTTPS URL of the Activate server (e.g. https\://activateselfservice). - **Connect using** – Choose authentication type (*Windows Integrated* or specific credentials). 5. Click **Connect** to validate communication with Activate. :::hint{type="warning"} On successful connection, please disable Windows Authentication in IIS on the Activate server. Anywhere will now connect to Activate using a secure API key. ::: # Site Binding Configuration The installer now will have created the IIS Site for Anywhere and show this message: :::BlockQuote *IIS Web Site Anywhere – \[InstanceName] – anywhere has been created or updated. Please review bindings and install SSL certificates.* ::: You now have to configure the HTTPS site binding. 1. Open **IIS Manager**. 2. Locate the new site (e.g. Anywhere – InstanceName). 3. Click **Bindings **to open the Site Bindings dialog. 4. Click **Add** to add a new site binding and fill the following fields - **Type **= https - **Port **= 443 - **Host name **= Host name of Anywhere server - **SSL Certificate **= Select installed SSL certificate, confirm correct certificate by comparing subject name and thumbprint as required. 5. Click **Ok **to add the new site binding. 6. Select any existing **Type = http** bindings and remove them. 7. Click **Close** 8. Restart the Anywhere site. :::hint{type="info"} The certificate hostname must match the Anywhere URL or users will see browser and API errors. ::: # Verification and Testing Follow these steps to confirm Activate and Anywhere are communicating correctly 1. Browse to https\://yourdomain from a browser, both internally and externally as required. 2. Verify the site loads without errors and presents the Microsoft Azure login page. 3. Log in using an Azure account. 4. Confirm requests are proxied successfully by making a service request or updating your details. 5. Check the Windows Event Viewer and log files for startup or auth warnings. # Installation Complete Activate Anywhere is now installed and ready to enable external access to Activate. #