Working with realms

If you are using Local User Authentication with Remedy Single Sign-On (Remedy SSO or RSSO), you use a realm for that authentication.

If you install the embedded Remedy SSO during the BMC Atrium Orchestrator Platform installation, a realm named BAOLocal is automatically created during the installation of the repository, CDP, and HA-CDP if it is installed.

If you are using an external version of Remedy SSO, you need to create the realm in Remedy SSO.

You configure realms in the Remedy SSO Administrator console. For more information about managing realms in the console and Remedy SSO authentication, refer to the following topics:

  • Configuring realms
  • Configuring Remedy SSO for authentication

The following video (2:17) demonstrates how to create the Local User Authentication realm.

To create the Local User Authentication realm in the console

  1. From the console, access the Realm tab.
  2. Click Add Realm.
  3. Click General and add realm details, including a Realm ID (such as a name). Realm parameters are described in  Configuring realms .
  4. Click Authentication.
  5. From the Authentication Type list, choose Local.
  6. (optional) Select Enable LDAP authentication for local user to use this feature.
  7. Click Add.


If you are using Atrium Orchestrator version 7.9.01 or later, with the embedded Remedy SSO authentication you can use LDAP and local user authentication. You do not need a second realm. You can configure a realm to use two authentication mechanisms using the Enable Chaining Mode button. When chaining the two authentication mechanisms, specify which authentication mechanism to use first. The LDAP authentication is not replicated (over the fail-safe ESB) to other peer's Remedy SSO instance. Local user accounts, roles, and role mappings are replicated.

Was this page helpful? Yes No Submitting... Thank you


  1. Joerg Kirchhoff

    I've installed Remedy SSO 9.1.01 and there is no Authentication Type Local. How can I solve this?

    Sep 26, 2016 05:24
    1. Dorothy Poole

      Hi Joerg. I have contacted the team to determine if there are any issues with the information on this page. I have seen the Local authentication option on a team setup. If you are having trouble with the setup, please contact Support. As soon as I hear from team members, I will respond and, if necessary, update the page.

      Sep 26, 2016 07:12
    1. Dorothy Poole

      Hi Joerg. I've just heard from a team member that Remedy SSO version is required to have Local authentication support. 

      I updated the enhancements page, where it lists the RSSO version.

      Sep 26, 2016 10:12
  2. Lukasz Piech

    is even in EPD? I can only see 9.1.01 Does it mean BAO 7.9 cannot be integrated to existing RSSO 9.1.01?

    Nov 26, 2016 05:58
    1. Dorothy Poole

      Joerg is correct. You will find this patch in the BAO Platform download area. You should use this with 7.9.

      Nov 28, 2016 07:52
      1. Lukasz Piech

        Thanks! Will it work with 9.1.02 (once released)?

        Dec 03, 2016 01:27
        1. Dorothy Poole

          9.1.02 is not finalized yet, but I believe that there will be a new RSSO SP to use with it so that more features are supported. 

          Dec 05, 2016 06:46
  3. Joerg Kirchhoff

    You can find it under the category Atrium Orchestrator. It was a Special release for the BAO Integration. With this Version you have the possibility to use a Local User Management.

    I think it is not working with RSSO 9.1.01.

    Nov 28, 2016 01:36
  4. Volker Scheithauer

    Hello. May we get a working example for Microsoft Active Directory?

    Oct 10, 2017 02:22