Esta documentação técnica está disponível em inglês.
The gateway gives staff and authorised partner systems a secure way to reach Sentinel ID while the application and database stay on the organisation's private network.
Approved access for staff
When the access-client policy is enabled, staff open the web application through an approved Sentinel access client. This applies to privileged accounts too. Each installation is registered and approved separately. Copying the program to another computer does not approve the new installation.
The client shows the server it connects to and opens the workspace through a local browser address. It carries only Sentinel ID traffic. After an hour without activity, it stops until the user starts it again.
Where account verification is required, the user provides the authorised account's current authenticator code. The server checks the code and the installation. Repeated failed attempts are limited, and an administrator can revoke a device when access is no longer needed.
A private connection to the application
The private application server starts the connection to the gateway. Staff and partner systems use the gateway's public address to reach the service. Pages, API requests, file transfers and live communications can all follow this path.
This arrangement allows the application and database to remain on a private network. Its protection depends on the network being set up to prevent direct public access to those services.
Field devices and partner systems
The Android Field app uses its own device approval and account checks. It does not need the desktop access client.
Partner systems use API keys with only the permissions they need. Account or key IP restrictions apply when enabled. Using the gateway does not give an integration broader access to records.
Planning for traffic
Capacity depends on the number of people connected at once, the volume of requests and the amount of video or other media being transferred. Continuous video usually needs much more bandwidth than record searches. A deployment should be tested with the expected mix of traffic and a recovery plan for connection failures.