Remedy Single Sign-On at-a-glance


The TrueSight Presentation Server component uses Remedy Single Sign-On (Remedy SSO) to manage tenants and authenticate users. Earlier releases of TrueSight Presentation Server used Atrium Single Sign-On (Atrium SSO) to handle these functions. Because Remedy SSO does not provide a direct upgrade from Atrium SSO, you must install Remedy SSO and migrate users from Atrium SSO before upgrading the TrueSight Presentation Server.

Before installing or upgrading the TrueSight Presentation Server, review the sections in this topic to familiarize yourself with the Remedy SSO product. The TrueSight Operations Management and Presentation Server documentations include the following Remedy SSO information:

  • Planning and Installing Remedy SSO
  • Configuring the general settings
  • Configuring tenants
  • Configuring Local, LDAP/AD, SAMLv2, Kerberos, and Certificate-based authentication types to work with the Presentation Server
  • Migrating internal user data from Atrium SSO to Remedy SSO
  • Uninstalling Remedy SSO
  • Upgrading Remedy SSO

For more information on Remedy SSO, you can also access the Remedy Single Sign-On documentation.

Remedy SSO version note

BMC recommends that you refer to the product documentation corresponding to the version of Remedy SSO that you are planning to install and configure with the TrueSight Operations Management.


Remedy SSO overview

Remedy Single Sign-On (Remedy SSO) is an authentication system that enables users to enter their credentials only once for authenticating in a multi-software environment. Upon authentication, users automatically gain access to all applications that are integrated with Remedy SSO. In TrueSight Presentation Server, Remedy SSO supports only the following authentication types:

  • Local
  • LDAP/AD
  • SAMLv2
  • Kerberos
  • Certificate-based

Based on your organization's requirements, you can configure any of the authentication types to authenticate the users for TrueSight product components. To configure and use these authentication types you must do the following:

  • Install the Remedy Single Sign-On server and configure it with an authentication server such as LDAP/AD or SAMLv2.
  • Create the required tenants (realms), user groups, and users on the Remedy Single Sign-On Admin console.
  • Integrate the Remedy Single Sign-On server with the TrueSight Presentation Server during the TrueSight Presentation Server installation or upgrade.

Remedy SSO features

Remedy SSO is a lightweight system that offers the following features:

  • Multiple deployment options
  • High-availability and session failover provisions
  • Multitenancy option by default
  • User ID transformations
  • Authentication Fallback/Chaining
  • Login page branding
  • Logging options

For the TrueSight Presentation Server, Remedy SSO supports only the following localization languages:

  • English
  • German
  • Simplified Chinese

Supported Remedy Single Sign-On Server versions with Presentation Server

The following table illustrates the required versions of TrueSight Presentation Server and Remedy SSO for TrueSight Presentation Server.

TrueSight Presentation Server versions

11.3.01, 11.3.02

Remedy Single Sign-On version

9.1.03 and later


Remedy SSO latest patches and hot fixes

  • If you have Remedy Single Sign-On installed, you must check and apply the relevant patches for a seamless integration with the TrueSight Presentation Server.
  • Before proceeding with the patch installation, if the TrueSight Presentation Server is running, stop the TrueSight Presentation Server and back up Remedy Single Sign-On.

Remedy SSO and TrueSight Presentation Server upgrade 

The Remedy SSO server must be installed before you install or upgrade the TrueSight Presentation Server. Ensure that you perform the following steps based on your upgrade scenario:


New to Presentation ServerUsing Presentation Server 11.3.01
and applying 11.3.02
Using Presentation Server 11.0, upgrading to 11.3.01 and applying 11.3.02Using Presentation Server 10.7, upgrading to 11.3.01 and applying 11.3.02

1.Install and configure Remedy SSO (any supported version)





1.You have a choice to do one of the following:

  • Continue to use the existing Remedy SSO installation and configuration with the Presentation Server 11.3.01
  • Upgrade and configure Remedy SSO to one of the supported versions.



1.You have a choice to do one of the following:

  • Continue to use the existing Remedy SSO installation and configuration with the Presentation Server 11.0.
  • Upgrade and configure Remedy SSO to one of the supported versions.


1.Install and configure Remedy SSO (any supported version)

2. Install the Presentation Server 11.3.01

2. Upgrade the Presentation Server to 11.3.01 and configure it with the one of the following:

  • Configure with an existing Remedy SSO setup.
  • Configure with the upgraded Remedy SSO setup.
2.Migrate the internal user groups and internal users from Atrium SSO to Remedy SSO

3.Upgrade the Presentation Server to 11.3.01

3. Apply the Presentation Server 11.3.02 Fix Pack2. Apply the Presentation Server 11.3.02 Fix Pack3. Apply the Presentation Server 11.3.02 Fix Pack 4. Apply the Presentation Server 11.3.02 Fix Pack

Remedy SSO and Atrium SSO comparison

For existing Presentation Server and Operation Management users, the following comparison is provided:

AreaRemedy SSOAtrium SSO
Overall features
  • A light-weight application that provides the single sign-on capability.
  • Simple to set up the failover or high-availability environment.
  • User interface is easy to use, set up, and configure.
  • Can backup and restore configuration data.
  • Uses a subset of technologies within the OpenAM project that are required by BMC products to provide single sign-on capability.
  • Complex to set up the failover or high-availability environment.
  • User interface is complex to use, set up, and configure.
  • Cannot backup and restore configuration data.
User login
workflow
  • Customizable login page.
  • Log in from the Remedy SSO server login page or from the SAML IdP login page.
  • Single-step login (for a single-tenant environment): Enter the Presentation Server user name and password to log in.

  • Two-step login (for a multi-tenant environment)
    • Step 1: Enter the application domain value of the tenant (realm).
    • Step 2: Enter the Presentation Server user name and password to log in.
  • Log in from the Presentation Server login page.
  • Single-step login: Enter the Presentation Server user name and password to log in.
Supported authentication types
  • Local
  • LDAP/AD
  • SAMLv2
  • Kerberos
  • Certificate-based
  • Internal (Local)
  • LDAP/AD
Default
tenant (realm)
* (asterisk) is the default tenant (realm).BmcRealm is the default tenant (realm).
Installation options

Two different installers are available.

  • Remedy SSO server installer: Default Remedy SSO installation program that does not install prerequisite software, such as JRE, Tomcat, and a database. It supports the Microsoft SQL Server, Oracle, and PostgreSQL databases.

  • Remedy SSO for TrueSight installer: A consolidated installation program that installs all of the prerequisite software required to install Remedy SSO for use with TrueSight Presentation Server. It supports only the PostgreSQL database.


    Note: This is applicable only for version 11.3.01. This is not available for version 11.3.02.
Single consolidated installer.
Communication interfaceUses both a web agent and REST APIs.Uses only REST APIs.

Where to go from here

Was this page helpful? Yes No Submitting... Thank you

Comments