Remedy Single Sign-On at-a-glance

The TrueSight Presentation Server component uses Remedy Single Sign-On (Remedy SSO) to manage tenants and authenticate users. Earlier releases of TrueSight Presentation Server used Atrium Single Sign-On (Atrium SSO) to handle these functions. Because Remedy SSO does not provide a direct upgrade from Atrium SSO, you must install Remedy SSO and migrate users from Atrium SSO before upgrading the TrueSight Presentation Server.

Before installing or upgrading the TrueSight Presentation Server, review the sections in this topic to familiarize yourself with the Remedy SSO product. The TrueSight Operations Management and Presentation Server documentations include the following Remedy SSO information:

Planning and installation for Remedy SSO
Configuring the general settings
Configuring tenants
Configuring Local, LDAP/AD, and SAMLv2 authentication to work with the Presentation Server
Migrating internal user data from Atrium SSO to Remedy SSO

For more information on Remedy SSO, you can also access the Remedy Single Sign-On documentation.

Remedy SSO overview

Remedy Single Sign-On (Remedy SSO) is an authentication system that enables users to enter their credentials only once for authenticating in a multi-software environment. Upon authentication, users automatically gain access to all applications that are integrated with Remedy SSO. In TrueSight Presentation Server, Remedy SSO supports only the following authentication types:

Local
LDAP/AD
SAMLv2

Note

The Infrastructure Management administrator console and TrueOps mobile app does not support the SAMLv2 authentication type.

In TrueSight Presentation Server, Remedy SSO does not support the following authentication types:

Kerberos
CERT

Based on your organization's requirements, you can configure any of the authentication types to authenticate the users for TrueSight product components. To configure and use these authentication types you must do the following:

Install the Remedy Single Sign-On server and configure it with an authentication server such as LDAP/AD or SAMLv2.
Create the required tenants (realms), user groups, and users on the Remedy Single Sign-On Admin console.
Integrate the Remedy Single Sign-On server with the TrueSight Presentation Server during the TrueSight Presentation Server installation or upgrade.

Supported Remedy Single Sign-On Server versions with Presentation Server

The following table illustrates the required versions of TrueSight Presentation Server and Remedy SSO for TrueSight Presentation Server.

TrueSight Presentation Serverversion	11.0.00
Remedy Single Sign-On version	9.1.03.001 and later.

¹ - You can use the instructions in this document to download, install, upgrade, or configure only Remedy SSO 9.1.03.001 version.

² - If you want to download, install, upgrade, or configure a 9.1.04 version, go to Remedy Single Sign-On 9.1.04 EPD page and perform the installation instructions given in Remedy Single Sign-On 9.1.04.

³ - If you want to upgrade and configure one of the supported higher version of Remedy SSO, see Remedy Single Sign-On 18.02. , Remedy Single Sign-On 18.05. , or Remedy Single Sign-On 18.08. .

Note: If you have Remedy Single Sign-On installed, you must check and apply the relevant patches for a seamless integration with the TrueSight Presentation Server. Before proceeding with the patch installation, stop the TrueSight Presentation Server and back up Remedy Single Sign-On.

Remedy SSO features

Remedy SSO is a lightweight system that offers the following features:

Multiple deployment options
High-availability and session failover provisions
Multitenancy option by default
User ID transformations
Authentication Fallback/Chaining
Login page branding
Logging options

For the TrueSight Presentation Server, Remedy SSO supports only the following localization languages:

English
German
Simplified Chinese

Remedy SSO and TrueSight Presentation Server upgrade

The Remedy SSO server must be installed before you install or upgrade the TrueSight Presentation Server. Before upgrading the TrueSight Presentation Server, you must perform the following steps.

Install Remedy SSO.
Migrate the internal user groups and internal users from Atrium SSO to Remedy SSO.

Remedy SSO and Atrium SSO comparison

For existing Presentation Server and Operation Management users, the following comparison is provided:

Area	Remedy SSO	Atrium SSO
Overall features	A light-weight application that provides the single sign-on capability. Simple to set up the failover or high-availability environment. User interface is easy to use, set up, and configure. Can backup and restore configuration data.	Uses a subset of technologies within the OpenAM project that are required by BMC products to provide single sign-on capability. Complex to set up the failover or high-availability environment. User interface is complex to use, set up, and configure. Cannot backup and restore configuration data.
User login workflow	Customizable login page. Log in from the Remedy SSO server login page or from the SAML IdP login page. Single-step login (for a single-tenant environment): Enter the Presentation Server user name and password to log in. Two-step login (for a multi-tenant environment) Step 1: Enter the application domain value of the tenant (realm). Step 2: Enter the Presentation Server user name and password to log in.	Log in from the Presentation Server login page. Single-step login: Enter the Presentation Server user name and password to log in.
Supported authentication types	Local LDAP/AD SAMLv2	Internal (Local) LDAP/AD
Default tenant (realm)	* (asterisk) is the default tenant (realm).	BmcRealm is the default tenant (realm).
Installation options	Two different installers are available. Remedy SSO server installer: Default Remedy SSO installation program that does not install prerequisite software, such as JRE, Tomcat, and a database. It supports the Microsoft SQL Server, Oracle, and PostgreSQL databases. Remedy SSO for TrueSight installer: A consolidated installation program that installs all of the prerequisite software required to install Remedy SSO for use with TrueSight Presentation Server. It supports only the PostgreSQL database.	Single consolidated installer.
Communication interface	Uses both a web agent and REST APIs.	Uses only REST APIs.