# IQService Settings

Install IQService to support execution of provisioning operations and native rules. IQService is required by the Active Directory connector for all provisioning, and for reading certain fields from a user's entry, including Terminal Services and Lync attributes.

> [!IMPORTANT]
>
> This instance of IQService is configured to listen on a TLS port by default to improve security and safeguard your environment. To establish a secure connection, ensure to follow the following steps:
>
> - Enable the TLS configuration flag in your source application.
> - Refer to the [Configuring TLS and Client Authentication for IQService](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/iqservice/configuring_tls_and_client_authentication_for_iqservice.html>) page for detailed instructions on configuring TLS for IQService, including client authentication.
>
> Ensuring proper TLS configuration is crucial for maintaining the security of your IQService deployment.

Before you start using the connector, install and register IQService on any Windows system with any of the supported Operating Systems. For more information on installing and registering IQService, refer to the [IQService Administrator's Guide](<https://documentation.sailpoint.com/connectors/iqservice/help/index.html>).

You must install IQService to support the following SailPoint features:

- Provisioning:

  - Active Directory Accounts
  - Exchange Mailboxes
- Loading and Provisioning Skype for Business Accounts
- Certification of Active Directory Entitlements (if you want to automatically revoke disapproved items)

  > **Note**
  >
  > If you want to create manual tasks for revoked items, you'll need to use Expert Services to edit your Active Directory source settings. For more information, refer to Certifications Overview.
- Password management for Active Directory accounts

If you don't need this functionality, IQService does not need to be running, and you can leave the **IQService Host** and **IQService Port** fields blank. Entering incorrect values for these fields causes the test connection process to erroneously report a failure to connect to the application.

## IQService Installation

> [!NOTE]
>
> **Screenshot**
>
> [![Download IQService](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/img/download_iqservice.png>)](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/img/download_iqservice.png>)

> [!NOTE]
>
> IQService has the built-in capability to auto update (this is the default). To enable the auto update capability, UpdateService must be configured alongside the IQService installation. Refer to [Configuring IQService Auto Update](<https://documentation.sailpoint.com/connectors/iqservice/help/updating_iqservice.html>).

### Download IQService

To download the IQService installation, complete the following:

1. Download and install IQService using one of the following methods:

   - Select the **Download IQService** button.
   - Download, install, and configure IQService by following the steps mentioned in the [IQService Administrator's Guide](<https://documentation.sailpoint.com/connectors/iqservice/help/index.html>) for Installing and Registering IQService.

   > **Note**

   You are only entitled to download components for which you have an active license with SailPoint and the availability of a component for download does not grant you a license to use a component or entitle you to use a component for which you do not have an active license. Contact your Account Representative or CSM for more information.
2. Unzip the downloaded `IQService.zip` archive into the desired location. For example, `C:\SailPoint\IQService\`.

   Verify the DLLs are trusted by checking the properties of the DLL files.
3. Run one of the following commands to install IQService and specify the TLS port information:

   - Run the following command to install IQService without specifying the TLS port:

     ```text
     IQService.exe -i
     ```

     This command installs IQService with a name of `IQService-Instance1` and connects to port 5050 (if available).
   - Run the following command to install IQService with the TLS port:

     ```text
     IQService.exe -i -o <TLS port number>
     ```

     This command installs IQService with a name of `IQService-Instance1` and connects to the specified port number. For more information on requirements and procedures to set up TLS communication and client authentication, refer to [Configuring TLS and Client Authentication for IQService](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/iqservice/configuring_tls_and_client_authentication_for_iqservice.html>).
   - Run the following command to install IQService to communicate on TLS and non-TLS ports:

     ```text
     IQService -i -p <Non-TLS port number> -o <TLS port number>
     ```

     This command installs IQService with a name of `IQService-Instance1` and the specified TLS and non-TLS ports.
4. Start the service from the services applet or from the command line, using the following command: `IQService.exe -s`

## Configure IQService Settings

> [!NOTE]
>
> **Screenshot**
>
> [![Configure IQService](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/img/configure_iqservice.png>)](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/img/configure_iqservice.png>)

To configure the IQService settings, complete the following:

1. (Optional) In the **IQService Host** field, enter the FQDN/IP of the system where IQService is installed.
2. (Optional) Enter the **IQService Port** number used to connect. If you enable TLS, configure the corresponding IQService TLS port.
3. (Optional) Enter the **IQService User** for client authentication.
4. (Optional) Enter the **IQService Password** for the IQService user.
5. (Optional) By default, the **Use Transport Layer Security (TLS)** checkbox is selected. When selected, the **IQService User** and **IQService Password** fields are mandatory. For more information, refer to [Configuring TLS and Client Authentication for IQService](<https://documentation.sailpoint.com/connectors/microsoft/active_directory/va/help/iqservice/configuring_tls_and_client_authentication_for_iqservice.html>).
6. Select **Save**.