What is the Moonshot Identity Manager?

The Moonshot Identity Manager is a central point from which you can manage your credentials to be used by Moonshot.

Managing credentials using the Moonshot Identity Manager

The main way of interacting with the Moonshot Identity Manager is through a macOS app called Moonshot. It can also have identity information deployed to it - see this page for .

Loading the Identity Manager

Normally, the Identity Manager is invoked automatically when you try to log in to a Moonshot-enabled service. If you need to modify and remove an existing identity (or manually add an identity), then you will manually load it. To do this, you can:

• Locate the Moonshot Identity Manager in the macOS LaunchPad on the Dock.

  or

• Open a Finder window, browse to the Applications folder and click the Moonshot app.

The Moonshot Identity Manager should appear.

Keychain Access

The Moonshot Identity Manager uses the Keychain to store your Moonshot identities. The first time the Moonshot Identity Manager tries to access your keychain, you will be prompted to give Moonshot access to it. Enter your password and select 'Always Allow' to not be prompted again.

Working with Identities

Once the Moonshot Identity Manager has loaded, you can now add, modify, or remove identities.

Adding an Identity

Importing a credential

1. Click the Import button.
2. In the dialog that appears, browse to your credential you want to import.
3. Select it, click 'Select'.
4. You should get a message that confirms a successful import.
   

Manually adding an identity in the Moonshot Identity Manager.

1. Click Identity, then 'Add new'.
2. Fill in the details of the identity you wish to add:
   1. Display Name: this is a friendly name for the identity that will be displayed in the identities list.
   2. Issuer - this should be the realm associated with your organisation (e.g. camford.ac.uk).
   3. User name: this should be your username (e.g. bob.jones).
   4. Password: the password associated with that username.
3. Click Add Identity to save the identity.

Modifying an Identity

1. Load the Moonshot Identity Manager.
2. Choose the identity to modify, then click Show Details to display the details of the identity. From here, you can:
   1. Modify the issuer, username or password:
      
      
   2. View or clear the trust anchor installed or associated with this identity (if any)
   3. Or remove services or service selection rules associated with this identity:
      

Removing an Identity

1. Load the Moonshot Identity Manager.
2. Select the identity to delete.
3. Click the "-" button below the list of identities to delete the identity. You will be prompted to confirm the deletion.
   

Service to Identity Mapping

Each identity can be used with one or more Moonshot services. The Moonshot Identity Manager allows these mappings to be created, modified, or removed.

Viewing existing mappings

If you wish to view existing mappings for each identity, then do the following:

1. Load the Moonshot Identity Manager as detailed above.
2. Double-click the identity whose mappings you wish to view.
3. A list of services associated with that identity will appear in the Services section below the trust anchor details. 

Adding a mapping

The first time you attempt to use a Moonshot enabled service, the Identity Manager will pop up.

Simply choose an existing identity, or create a new one as described above, then hit the "Connect" button.

Removing a mapping

If you wish to make the Moonshot Identity Manager forget about an existing mapping (if you wish to use a different identity for a particular service, or if you stop using that service entirely), then do the following:

1. Load the Moonshot Identity Manager as detailed above.
2. Double-click the identity whose mappings you wish to view.
3. In the Services list that is presented, simply select the service, click the '-' button below the service list and confirm the deletion in the dialogue box that appears. 
4. Click Save Changes to save the change.

Advanced Usage

Configure the Identity Manager to not use Moonshot for a particular service

If you regularly use a service which is not Moonshot enabled or that you use traditional, non-Moonshot, credentials to access, you can tell the Identity Manager to stop appearing every time you attempt to access the service by doing the following:

1. Attempt to access the service as normal; the Moonshot Identity Manager should pop up.
2. Choose the identity labelled "No Identity", and hit the "Send" button.
3. For all subsequent authentication attempts, the Moonshot Identity Manager should not appear.