KanBo Installation on Office 365 and Azure (Manual)

Upload the certificate to KanBo

1. Go back to Your KanBo Azure Webapp ang go to TLS/SSL settings, then go to Private Key Certificates (.pfx).
2. Click on "Upload certificate".

3. Provide the password and Upload it.

4. Copy the certificate's thumbprint.

5. Open Configuration and add a new Application Setting.

6. The setting's name should be WEBSITE_LOAD_CERTIFICATES. The value should be the Thumbprint of certificate.
7. Save it.

8. In the Bindings Settings activate "HTTPS only".

Adjust KanBo configuration

There are some areas that need filling out in the appsettings.json file of both the KanBo App and the Resource Management app. Let's start with KanBo

Paste the previously copied ADO.NET connection string in the place of "FILL-ME", without dropping the quotation marks.

Modify the line by filling in the password and adding "MultipleActiveResultSets=True;" to the end of the connection string.

   {
    "type": "set-language-for-new-users",
    "lang": "de-DE"
   },

Here You are able to set the Default language for the new KanBo Users by changing the "lang" variable. Possible languages are:

• de-DE - German
• de-AT - Austrian German
• en-US - United States English
• en-GB - United Kingdom English
• en-AU - Australian English
• en-CA - Canadian English
• es-ES - Spanish
• pl-PL - Polish

   {
    "type": "server-url",
    "value": "FILL-ME"
   },

The "value" variable should contain the full URL of Your KanBo (e.g. https://mykanbo.azurewebsites.com/)

  {
    "type": "package",
    "name": "auth-aad",
    "client-id": "FILL-ME",
    "tenant": "FILL-ME",
    "thumbprint": "FILL-ME",
    "admin-upn": "FILL-ME"
   },

The "client-id" and "tenant" should contain the Client ID and the Directory (Tenant) ID copied from Your Azure Active Directory App Registration, "thumbprint" should contain the Thumbprint of the certificate You have created, and "admin-upn" should be Your email address in Azure (e.g. admin@company.com).

 {
    "type": "package",
    "name": "webjobs",
    "thumbprint": "FILL-ME"
   },

This is needed to allow KanBo Webjobs to work. Insert the same thumbprint here that You used for the "auth-aad" package.

/*RESOURCE MANAGEMENT*/
   
   {
        "type": "auth.oauth",
        "issuer": "rmkanbo",
        "children": [
          [
            "cert",
            {
              "type": "X509SignerFromFile",
              "file": "C:/home/site/wwwroot/Certificates/CERTNAME",
			  "key": "CERTPASS"
            }
          ]/* client will go here */
        ]
      },
	  {
        "type": "resource-mgmt",
        "issuer": "rmkanbo",
        "rm-uri": "https://RM-APP-URL/api",
        "children": [
          [
            "cert",
            {
              "type": "X509SignerFromFile",
			  "file": "C:/home/site/wwwroot/Certificates/CERTNAME",
			  "key": "CERTPASS"
            }
          ]
        ]
      }, 

This is where we configure the future connection to Resource Management.

Replace "CERTNAME" in both places to the name of Your generated certificate.

Replace "CERTPASS" in both places with the password of Your generated certificate.

Replace "RM-APP-URL" with the URL of the Resource Management Web App You created.

You can now save the appsettings.json file. After that, open the appsettings.json file in the Resource Management package.

{
  "ConnectionStrings": {
    "Database": "CONNECTION-STRING"
  },

Use the same connection string here that You used for the KanBo App

"KanboApi": {
    "Url": "https://KANBO-URL",
    "ClientId": "",
    "ClientSecret": "",
    "CallbackPath": "/oauth/callback",
    "AuthorizationEndpoint": "https://KANBO-URL/auth/rmkanbo/code",
    "TokenEndpoint": "https://KANBO-URL/auth/rmkanbo/token",
    "Scope": "kanbo.id"
  }
}

Here, replace every KANBO-URL with the URL of the KanBo App You created.

Uploading the KanBo packages

1. Navigate to the Azure website KUDU service for Your KanBo App(add .scm just before azurewebsites.net e.g https://mykanbo.scm.azurewebsites.net) then select Debug console -> PowerShell.
2. Enter the folder "site" and create 2 new folders called "Certificates" and "Templates". Upload the certificates You created into the "Certificates" folder
   
3. Pack all your KanBo App files into a .zip file (but please don't add the folder!).
4. Now go to the folder called "wwwroot" and drag and drop your .zip archive into right upper part of KUDU service to unzip the contents of the .zip archive.

Uploading the Resource Management package

Similiar process to uploading the KanBo files. Pack Your Resource Management package into a .zip file. go to the Kudu tools of the Resource Management app and upload the Resource Management package by drag and dropping it to the right side.

Creating the databases

1. Go to https:{your kanbo address}/setup and you will be directed to the KanBo Setup page.
2. Choose the Start simple setup option.

After clicking on the Automatic Setup option, installation of KanBo Setup will proceed. Wait a couple of minutes until it is finished.

Obtaining the license key

1. To obtain a KanBo License ID, click on "Show Advanced Setup", then click on the "Refresh" button near the License ID fieldset.
2. Please send the KanBo ID to support@kanboapp.com, so a license key can be generated and sent to you.

3. Go back to the appsettings.json and paste the license key in the "LicenseKey" variable.

4. After updating the pasting the LicenseKey, save the appsettings.json file and restart the KanBo app.

Your KanBo has been successfully installed, but there is still some work to be done.

Configuring KanBo and Resource Management connection

First, start off by restarting the KanBo App in Azure

Then, after Your KanBo has restarted, enter an url like this: https://YOURKANBOURL/auth/rmkanbo/newclient

You should be presented with a page that looks like this

There are two parts here. The "Client config" part that goes into the appsettings.json of the KanBo App, and the "OAuth2 config" which goes into the appsettings.json of the Resource Management app.

For the KanBo side, You can find this comment in the appsettings.json:

/* client will go here */

Replace it with a comma, and then paste the Client config.

Couple of things to note, the "client" variable needs to have it's name changed to "id", the "url" value has to have the url of Your Resource Management app, and the "name" value needs to have something indentifiable written in it (like "My KanBo Resource Management")

As for Resource Management's appsettings.json, You can scroll to the bottom of it and find the empty "ClientId" and "ClientSecret" variables. Paste the "OAuth2 config" Client Id and Client Secret inside of their quotation marks

After all the appsettings.json files have been configured and saved, restart both apps, starting with the resource management app first

Connecting the KanBo App to the Resource Management App

Go to the setup page of Your KanBo once again (https://YOURKANBBOURL/setup). You will find a new "Resource Management" tab there

You should be presented with 4 checks passing and one check failing, being the Schema Validation check. If You experience any other results, please check if You pasted everything correctly

Next, click on "Initialize RM content database".

If every check shows as "PASSED", You have now succesfuly connected the KanBo App to the Resource Management App!

Creating Sync Jobs

For KanBo to sync Azure Active Directory profiles and o365 groups two Webjobs need to be created. Along with the web.zip file, You will be provided with a KanBo.JobHost.zip file. It contains its own appsettings.json, which we will need to edit. There are two sections to modify:

O365 Group Sync

"ConnectionStrings": {
    "KanBo": "FILL-ME"
  },

Here, You will need to paste the same connection string that You use in Your KanBo appsettings.json.

{
    "type": "package",
    "name": "auth-aad",
    "client-id": "FILL-ME",
    "tenant": "FILL-ME",
    "thumbprint": "FILL-ME"
   },
   {
    "type": "package",
    "name": "webjob.group-sync",
    "thumbprint": "FILL-ME",
    "kanbo-url": "FILL-ME"
   }

The values here should be the same ones that You used in the appsettings.json of Your KanBo.

After saving the configured file, put all the files into a .zip folder and follow these instructions on creating a scheduled WebJob: https://docs.microsoft.com/en-...

For the o365 Group Sync jobs, choose the name of "GroupSync" and a CRON expression of "0 */15 * * * *"

O365 Profile Sync

To set up a Profile Sync job, use the same package that You've used for the Group Sync job.

Full explanation for Profile Sync configuration can be found here: Creating and customizing the Profile Sync Webjob

Use it

1. Create boards.
2. During the board creation, you can choose whether you would like to create new Office 365 Group or use the existing one under the board.

3. Group memberships will be synchronized.

Also, user's information will be taken from AAD and transferred into KanBo Profile.

Configure KanBo

1. Configure email notifications

Follow this instruction to configure email notifications.

2. Configure KanBo Search

Follow this instruction to configure Search for KanBo (Elastic Search).

3. Configure KanBo Teams App

Follow this article to configure KanBo Teams App

4. Configure KanBo Content Database on Azure

As soon as your KanBo is installed, please adjust the sizing of Your database to be suitable

A change might be necessary for a good performance of the KanBo Content Database which has been created during the Setup installation.

You can see dependencies on the table below:

Number of users on your KanBo instance	Recommended Pricing Tier for KanBo Content Database
20+ users	Standard 10 DTUs 250GB
50+ users	Standard 20 DTUs 250GB
100+ users	Standard 50 DTUs 250GB