Dualog Identity - Ship-Side Identity Server

Andrea

January 30, 2026 20:51

INTRODUCTION

Dualog Identity provides authentication services both in the cloud and on vessels. While cloud authentication is handled by the identity server at crew.dualog.com, ship-side authentication requires a local identity server running on the vessel.

The ship-side identity server is a component of Dualog Connection Suite. It enables:

Single Sign-On (SSO) for applications running on the vessel
Active Directory provisioning for Windows domains onboard

WHY A LOCAL IDENTITY SERVER?

Vessels frequently operate with limited or no internet connectivity. The ship-side identity server ensures that:

Crew can always authenticate to onboard applications, regardless of connectivity
Authentication is fast (no dependency on satellite links)
Security policies are enforced locally

When the vessel has connectivity, the ship-side identity server automatically syncs with the cloud within minutes, receiving:

New and updated user accounts
Ship assignments and access policies
Integration configurations
Password policy settings

PREREQUISITES

To use ship-side identity features (OIDC integrations or Active Directory provisioning), you need:

A vessel created in the Dualog Portal - The vessel must be set up in your organization with its IMO number configured
Dualog Connection Suite installed on the vessel - The Connection Suite platform includes the ship-side identity server
The vessel bound to your organization - Done via the Startpack during installation

SETTING UP THE SHIP-SIDE IDENTITY SERVER

The ship-side identity server is automatically included when you install Dualog Connection Suite. Follow these steps:

Step 1: Create the Vessel

Before installing Connection Suite, the vessel must be created in the Dualog Portal:

Log in to https://apps.dualog.com
Go to Organization > Ships
Click Add ship and follow the setup wizard

For detailed instructions, see Connection Suite Vessel Creation.

Step 2: Download the Startpack

The Startpack contains the vessel's configuration and binds the installation to your organization:

In the Dualog Portal, go to Connection Suite > CS Ship Setup
Select your vessel
Download the Startpack (.dsp file) matching your Connection Suite version

For detailed instructions, see How to download Startpack.

Step 3: Install Dualog Connection Suite

Install Connection Suite on the vessel's Dualog PC:

Run the Connection Suite installer
Follow the installation wizard
When prompted, provide the Startpack file you downloaded
Complete the installation and reboot

For detailed instructions, see Dualog Connection Suite - Full Installation.

Step 4: Configure Ship-Side Integrations

Once Connection Suite is installed:

Ship-side OIDC integrations configured in the Dualog Portal will automatically sync to the vessel
Active Directory integrations will begin provisioning users to the ship's AD
Users assigned to the vessel will be able to authenticate locally

CONFIGURING INTEGRATIONS

After the ship-side identity server is running, you can configure:

Ship-side OIDC integrations - Enable SSO for applications running on the vessel. See Setting Up Ship Integrations.
Active Directory provisioning - Sync user accounts to the vessel's Windows AD domain. See Active Directory Integration.

SYNC BEHAVIOR

The ship-side identity server syncs with the cloud automatically:

Frequency: Within minutes when the vessel has connectivity
Offline operation: The server continues to work fully offline using the last synced data
Automatic updates: Configuration changes made in the Dualog Portal are pushed to vessels automatically

TROUBLESHOOTING

Ship-side integrations not working

Verify Dualog Connection Suite is installed and running on the vessel
Check that the vessel was created with the correct IMO number
Verify the vessel has had connectivity to sync the latest configuration

Users cannot authenticate on the vessel

Confirm the user is assigned to that specific vessel (check ship assignment in Crew Accounts)
Verify the user's contract dates are current
Check that the user's account is active

Configuration changes not appearing on vessel

Changes sync within minutes when connected
If the vessel is offline, changes will sync when connectivity is restored
Contact Dualog support if sync issues persist