- 7 minutes to read

What is the Nodinite Web Client?

The Nodinite Web Client is the browser-based user interface of Nodinite. Business users, operators, and administrators use it to search Log Views, work with Monitor Views, explore the Repository Model, and administer the platform. The Web Client is part of the Core Services package and talks only to the Web API; it never reads a database itself.

This page explains how the Web Client is built and hosted, how users sign in, and which System Parameters change what the Web Client shows. For day-to-day use, see the end-user guide Getting Started with Nodinite.

Understanding the Web Client Architecture

graph LR subgraph "Client Tier" Browser["fab:fa-chrome Modern Browsers
Chrome, Edge, Firefox, Safari"] end subgraph "Nodinite Application Server (IIS)" WebClient["fa:fa-globe Web Client
own IIS web site and port"] WebAPI["fa:fa-cloud Web API
REST endpoints, business logic"] end subgraph "SQL Server" ConfigDB["fa:fa-database Configuration Database"] LogDB["fa:fa-database Log Databases"] end Browser -->|"HTTPS"| WebClient WebClient -->|"REST API calls"| WebAPI WebAPI -->|"Settings, Repository, security"| ConfigDB WebAPI -->|"Log queries"| LogDB

The Web Client runs in the browser and communicates only with the Web API. All data access, business logic, and security enforcement happen server-side.

Architecture Components

Component Technology Purpose Where it runs
Web Client .NET 10 / ASP.NET Core, HTML5 single-page application User interface rendering, client-side validation Its own IIS web site on the Nodinite Application Server
Web API .NET 10 / ASP.NET Core Business logic, authentication, authorization, data access Its own IIS web site on the same server
Configuration Database SQL Server Repository Model, settings, System Parameters, security, monitor definitions SQL Server instance
Log Databases SQL Server Log Event storage, split by time or size SQL Server instance(s)

Note

The Web Client is a single-page application (SPA): it loads once and then calls the Web API in the background. This keeps the user experience responsive and reduces server load.

Performance and Usability

  • Single-page application – fast, responsive UI with few full page loads
  • Paged results – large result sets are fetched page by page
  • Responsive design – adapts to desktop, tablet, and mobile layouts
  • Export – copy the API URI, print, or export Log View results to CSV (see Copy API, Print, and Export to CSV)

Hosting in Nodinite v7

In Nodinite v7 on Windows Server, each Core Service is its own IIS web site on its own port; the container runtimes run each service as a container instead. You don't create or edit the Web Client site by hand; the Nodinite Portal collects the values and the generated CLI package creates the site.

Setting Where you set it
Runtime model (Windows Server with IIS, or containers) Portal Step 1: Basics
Authentication mode for the Web Client Portal Step 2: Auth
Server that hosts the Core Services Portal Step 4: Servers
TLS host name (FQDN) and certificate subject Portal Step 4: Servers → Core host Configuration
Web Client port and service identity Portal Step 4: Servers → Core platform services

The Web Client is served at the root of its site, for example https://nodinite.contoso.com:<port>/. See Install Nodinite v7 for the complete flow, and Prerequisites for what the server, the browser, and the firewall need.

Supported Client Browsers

End-users need a modern, HTML5-compatible browser. The Web Client is tested and supported on:

Browser Minimum Version Notes
Google Chrome Latest stable ✅ Recommended
Microsoft Edge Latest stable ✅ Recommended (Chromium-based only)
Mozilla Firefox Latest stable
Apple Safari Latest stable macOS and iOS

Important

Internet Explorer is not supported. Use a modern browser.

Some features, such as downloading message payloads and exports, open a new window; see Allow browser pop-ups.

Authentication and Authorization

Each environment uses one authentication mode, chosen in the Portal Step 2: Auth. The installer configures the Web Client site to match.

Mode How users sign in Where to configure
Windows Authentication Seamless sign-on with Active Directory credentials (Kerberos, NTLM fallback). Access is granted to Users and Windows AD Groups Portal Step 2: Auth → Auth mode; Kerberos and SPN setup in HTTP SPN for IIS
OAuth 2.0 / OpenID Connect (OIDC) Redirect to an identity provider such as Microsoft Entra ID, including its MFA policies. Access is granted through Claims and Policies Portal Step 2: Auth → Web Client (client ID, callback paths, scopes); see Install Nodinite v7 - OpenID

Tip

For the Microsoft Entra ID app registrations, see Install Nodinite v7 - OpenID - EntraID. When users get an unexpected login prompt with Windows Authentication, see Login prompt asks for a password.

Both modes enforce role-based access control (RBAC) with Roles: users only see the data and features their Roles allow.

Windows Authentication Flow

  1. The browser sends a Kerberos ticket (or an NTLM response) to IIS.
  2. IIS validates the credentials against Active Directory.
  3. The Web API receives the authenticated Windows identity.
  4. The Web API looks up the User and Role assignments in the Configuration Database.

OpenID Connect Flow

  1. The browser redirects to the identity provider, for example Microsoft Entra ID.
  2. The user signs in with the identity provider (including MFA when required).
  3. The identity provider redirects back to the Web Client.
  4. The Web Client obtains tokens and calls the Web API with an access token.
  5. The Web API validates the token and maps its claims to Roles through Claims and Policies.

Authorization Model

Layer Enforcement point Purpose
UI layer Web Client (browser) Hides or disables UI elements the user can't use
API layer Web API Rejects unauthorized API calls
Audit layer Log Audits Records sensitive operations

Important

Defense in depth: Even if UI authorization is bypassed, for example by crafting API calls, the Web API enforces permissions.

For Role configuration and permission sets, see Roles, Permission Set for Log Views, and Access Management.

System Parameters that Shape the Web Client

The Web Client reads more System Parameters than any other component. Values are stored in the Configuration Database and changed under Administration › Settings › System Parameters (see Manage System Parameters). No restart is needed; the Web Client picks up a new value within about 15 seconds (HideAdditionalFieldValuesInLogViews is cached for up to an hour).

Appearance

Log View Data Protection

These parameters apply in every Log View, on top of the Permission Set for Log Views:

Repair and Resend

AI

Content and Repository

Access

Licence and Version

These are 🔒 read-only in System Parameters:

What Users Do in the Web Client

While this page focuses on the technical side, end-users work with these features in the Web Client:

  • Dashboard – integration health at a glance
  • Log Views – search transactions across systems with business-friendly filters
  • Monitor Views – track system health, receive alerts, and run remote actions
  • Repository Model – the integration landscape as living documentation
  • Business Process Models – end-to-end workflows with operational status
  • Administration – users, roles, views, and settings (administrators only)

Everything the Web Client does goes through the Web API, so you can automate the same operations with the REST API.

Note

Nodinite v6 is no longer supported. To move an existing v6 installation, follow Updating from v6 to v7.

Next Steps