IBM Cloud Orchestrator, Version 2.5.0.6

Accessing the IBM Cloud Orchestrator user interfaces

IBM® Cloud Orchestrator provides several user interfaces to access the various components.

To display the IBM Cloud Orchestrator user interfaces correctly, use one of the following browsers:
  • Internet Explorer versions 10 and 11
  • Firefox Extended Support Release 45.8 and later
  • Google Chrome version 49 and later

Access to the various IBM Cloud Orchestrator user interfaces depends on the role that is assigned, as shown in the following table:

User interface URL Access that is granted to
Self-service user interface https://ico_server_fqdn:443 admin role
domain_admin role
catalogeditor role
member role
Business Process Manager user interface https://ico_server_fqdn:443/ProcessCenter/login.jsp admin role only
In the user interface URL, ico_server_fqdn is the fully qualified domain name (for example, host.example.com) of the IBM Cloud Orchestrator Server. If IBM Cloud Orchestrator is installed highly available, use as the ico_server_fqdn the fully qualified domain name of the virtual IP.
Note: Do not use the IP address to access the IBM Cloud Orchestrator user interfaces.
You can extend the Self-service user interface URL to include the IBM Cloud Orchestrator domain name, as shown in the following example:
https://ico_server_fqdn:443/login?domainName=myDomain
In this example, the Domain field on the login screen is pre-populated with the value myDomain. If you do not specify a domain, the user is authenticated to the Default domain.

To log in to the Self-service user interface, you must specify the domain scope to which you want to be authenticated. In a single domain environment or if you do not specify a domain, you are authenticated to the Default domain. In addition to the domain-based authentication, when logging in, by default, you are authenticated to scope of the primary project that was specified when your user was created. After successful authentication, you can switch the project from the project list in the top banner of the Self-service user interface.

To log in to the Business Process Manager user interface, you must specify the domain name as a prefix of the user name wherein the delimiter between domain name and user name is a slash (/) character. For example, a user user1 of domain domain1 must specify domain1/user1. If you are a user who is within the default domain, you must authenticate only with your user name. Users and projects are shown in Business Process Manager as users and groups. Any user or project of custom domains are prefixed with the domain name delimited by a slash (/), that is, project p1 of domain domain1 appears as a group domain1/p1 in Business Process Manager. To ensure compatibility with an earlier version, users and projects of the default domain appear with its user and project name. As the user and the project name are prefixed by their domain name in Business Process Manager with a slash (/) as delimiter, the user name, project name, and domain name must not contain a slash (/) character.

Note: In IBM Cloud Orchestrator, user, project and domain names are case sensitive.
For administrative tasks in your OpenStack environment, use the OpenStack Dashboard, which is extended by IBM Cloud Orchestrator, by logging in to the following URL:
https://openstack_server_fqdn
where openstack_server_fqdn is the fully qualified domain name of the OpenStack Controller. The access is granted to the admin role only.

By default, the user is also authenticated to the scope of the primary project that you specified when you created the user. After you log in, you can change the project scope by selecting a new project from the project list in the top banner of the user interface. For more information about users, projects, and domains, see Managing security.

Note: In IBM Cloud Orchestrator, the following limitations apply:
  • A user name cannot contain a colon (:) character.
  • A password cannot contain an at sign (@) character.
  • Users cannot log in if the primary project to which they are assigned is disabled.
  • You cannot log in to the same IBM Cloud Orchestrator user interface with more than one browser session on the same machine. If you must log in to the same IBM Cloud Orchestrator user interface with two browser sessions on the same machine, use a different browser for each session. For example, use an Internet Explorer browser and a Firefox browser.

To view the IBM Cloud Orchestrator user interface in another language, set the language option in your browser. Move the preferred language to the top of the list, clear the browser cache, and refresh your browser view. For some browser and operating system combinations, you might need to change the regional settings of your operating system to the locale and language of your choice.

The Self-service user interface is translated in the following languages:
  • Brazilian Portuguese
  • French
  • Germany
  • Italian
  • Japanese
  • Korean
  • Russian
  • Simplified Chinese
  • Spanish
  • Traditional Chinese

You must set the locale in Business Process Manager separately. Log in to the Business Process Manager user interface, and click Preferences. Select the locale from the Locale preferences list, and click Save changes. You might need to log in again for the changes to take effect.