Hi Mark,

Fielded ISHRemote v7 (and also upcoming v8) work on PowerShell (Core) 7.x, meaning that ISHRemote works on PowerShell that runs on macOS and Linux. See  Automating on Tridion Docs - ISHRemote v7.0 now also available for PowerShell 7+  

As I tried to highlight in your earlier question, see  New project, will ISHRemote work with Tridion Docs 15? 

• Tridion Docs 14SP4/14.0.4 and earlier use WS-Federation and WS-Trust as security protocols to protect the Tridion Docs public SOAP API
• Tridion Docs 15/15.0.0 and also upcoming 15.1/15.1.0 public SOAP API is protected by OpenIDConnect modern security protocol

OASIS WS-Trust protocol is a big challenge to get working in other programming languages. It probably can be done, but is not for the faint hearted :)

I hope this already provides some insights in the options on the table.

Best wishes,
Dave

Thanks Dave, I appreciate it. I'll do more research on Powershell Core 7.x on linux.

Once we are running on Tridion Docs 15, will it be easier to use OpenID Connect with the SOAP API?

And now I'm curious, does ISHRemote use C# code under the covers to work with WS-Trust?

Hi Mark,

Really appreciate any feedback on the beta of upcoming ISHRemote v8 which supports Modern Authentication. It should work fine on linux.

ISHRemote has been open-source from the start, you can check source code, release notes, test framework and more on https://github.com/RWS/ISHRemote 

Going more technical here...

• Tridion Docs 15 has a public SOAP API protected by OpenID Connect. The way it was implemented is slightly easier than WS-Trust on previous Tridion Docs releases but not super easy. The way it was resolved was inspired by https://leastprivilege.com/2015/07/02/give-your-wcf-security-architecture-a-makeover-with-identityserver3/ You can actually read the ISHRemote v8 implementation on https://github.com/RWS/ISHRemote/blob/master/Source/ISHRemote/Trisoft.ISHRemote/Connection/InfoShareWcfSoapBearerCredentials.cs
• Tridion Docs 15.0 and also upcoming Tridion Docs 15.1 make progress on an OpenAPI/REST public Api. We are however not at feature parity yet with the public SOAP Api. ISHRemote has some experimental code and it is way simpler to authenticate (and replicate in other programming languages), see https://github.com/RWS/ISHRemote/blob/master/Source/ISHRemote/Trisoft.ISHRemote/Connection/InfoShareOpenApiWithOpenIdConnectConnection.cs#L105 

Best wishes,
Dave

Great tips thanks Dave!

I decided to go with PowerShell Core 7 on linux, and I got it running on Ubuntu 20.04 LTS. It works smoothly.It's PowerShell 7.4.

I installed ISHRemote with this:

Install-Module -Name ISHRemote -Repository PSGallery -Scope CurrentUser

This gives me ISHRemote 7:

> $ishsession.clientversion
  7.0.9620.100

If ISHRemote v8 is not pre-release, how can I upgrade to it? I looked at install docs on Github but it seems to call it pre-release.

Thanks

I decided to go with PowerShell Core 7 on linux, and I got it running on Ubuntu 20.04 LTS. It works smoothly.It's PowerShell 7.4.

I installed ISHRemote with this:

Install-Module -Name ISHRemote -Repository PSGallery -Scope CurrentUser

This gives me ISHRemote 7:

> $ishsession.clientversion
  7.0.9620.100

If ISHRemote v8 is not pre-release, how can I upgrade to it? I looked at install docs on Github but it seems to call it pre-release.

Thanks

Hi Mark,

At this moment in time ISHRemote v8 is a prerelease, meaning it passed all testing/unit-testing available, so it is as good as any other releases. It just needs a couple of small things to make it "feature complete". Anyway, the biggest difference between ISHRemote v7 and v8 is the introduction of Modern Authentication (so Access Management, OpenID Connect protocol that was fielded in Tridion Docs 15.0) as you could spot in the draft release notes.

Have a look at https://github.com/RWS/ISHRemote/blob/master/Doc/Installation-ISHRemote-8.0.md in essence you need Install-Module with " -Prerelease" flag ... Afterwards you can easily upgrade to the not-prerelease edition by an Update-Module or uninstall/install

Best wishes,
Dave