Remedy Single Sign-On at-a-glance

The TrueSight Presentation Server component uses Remedy Single Sign-On (Remedy SSO) to manage tenants and authenticate users. Earlier releases of TrueSight Presentation Server used Atrium Single Sign-On (Atrium SSO) to handle these functions. Because Remedy SSO does not provide a direct upgrade from Atrium SSO, you must install Remedy SSO and migrate users from Atrium SSO before upgrading the TrueSight Presentation Server.

Before installing or upgrading the TrueSight Presentation Server, review the sections in this topic to familiarize yourself with the Remedy SSO product. The TrueSight Operations Management and Presentation Server documentations include the following Remedy SSO information:

Planning and Installing Remedy SSO
Configuring the general settings
Configuring tenants
Configuring Local, LDAP/AD, SAMLv2, Kerberos, OpenID, and Certificate-based authentication types to work with the Presentation Server
Migrating internal user data from Atrium SSO to Remedy SSO
Uninstalling Remedy SSO
Upgrading Remedy SSO

For more information on Remedy SSO, you can also access the Remedy Single Sign-On documentation. Open link

Remedy SSO version note

BMC recommends that you refer to the product documentation corresponding to the version of Remedy SSO that you are planning to install and configure with the TrueSight Operations Management.

Remedy SSO overview

Remedy Single Sign-On (Remedy SSO) is an authentication system that enables users to enter their credentials only once for authenticating in a multi-software environment. Upon authentication, users automatically gain access to all applications that are integrated with Remedy SSO. In TrueSight Presentation Server, Remedy SSO supports only the following authentication types:

Local
LDAP/AD
SAMLv2
Kerberos
OpenID
Certificate-based

Based on your organization's requirements, you can configure any of the authentication types to authenticate the users for TrueSight product components. To configure and use these authentication types you must do the following:

Install the Remedy Single Sign-On server and configure it with an authentication server such as LDAP/AD or SAMLv2.
Create the required tenants (realms), user groups, and users on the Remedy Single Sign-On Admin console.
Integrate the Remedy Single Sign-On server with the TrueSight Presentation Server during the TrueSight Presentation Server installation or upgrade.

Remedy SSO features

Remedy SSO is a lightweight system that offers the following features:

Multiple deployment options
High-availability and session failover provisions
Multitenancy option by default
User ID transformations
Authentication Fallback/Chaining
Login page branding
Logging options

For the TrueSight Presentation Server, Remedy SSO supports only the following localization languages:

English
German
Simplified Chinese

Supported Remedy Single Sign-On Server versions with Presentation Server

The following table illustrates the required versions of TrueSight Presentation Server and Remedy SSO for TrueSight Presentation Server.

TrueSight Presentation Server versions	11.3.01, 11.3.02, 11.3.03
Remedy Single Sign-On version	9.1.03 and later

Remedy SSO latest patches and hot fixes

If you have Remedy Single Sign-On installed, you must check and apply the relevant patches for a seamless integration with the TrueSight Presentation Server.
Before proceeding with the patch installation, if the TrueSight Presentation Server is running, stop the TrueSight Presentation Server and back up Remedy Single Sign-On.

Remedy SSO and TrueSight Presentation Server upgrade

The Remedy SSO server must be installed before you install or upgrade the TrueSight Presentation Server. Ensure that you perform the following steps based on your upgrade scenario:

New to Presentation Server	Using Presentation Server 11.3.01 and applying 11.3.02 or 11.3.03	Using Presentation Server 11.0, upgrading to 11.3.01 and applying 11.3.02 or 11.3.03	Using Presentation Server 10.7, upgrading to 11.3.01 and applying 11.3.02 or 11.3.03
1.Install and configure Remedy SSO (any supported version)	1.You have a choice to do one of the following: Continue to use the existing Remedy SSO installation and configuration with the Presentation Server 11.3.01 Upgrade and configure Remedy SSO to one of the supported versions.	1.You have a choice to do one of the following: Continue to use the existing Remedy SSO installation and configuration with the Presentation Server 11.0. Upgrade and configure Remedy SSO to one of the supported versions.	1.Install and configure Remedy SSO (any supported version)
2. Install the Presentation Server 11.3.01		2. Upgrade the Presentation Server to 11.3.01 and configure it with the one of the following: Configure with an existing Remedy SSO setup. Configure with the upgraded Remedy SSO setup.	2.Migrate the internal user groups and internal users from Atrium SSO to Remedy SSO
2. Install the Presentation Server 11.3.01			3.Upgrade the Presentation Server to 11.3.01
3. Apply the Presentation Server 11.3.02 or 11.3.03 Fix Pack	2. Apply the Presentation Server 11.3.02 or 11.3.03 Fix Pack	3. Apply the Presentation Server 11.3.02 or 11.3.03 Fix Pack	4. Apply the Presentation Server 11.3.02 or 11.3.03 Fix Pack

Remedy SSO and Atrium SSO comparison

For existing Presentation Server and Operation Management users, the following comparison is provided:

Area	Remedy SSO	Atrium SSO
Overall features	A light-weight application that provides the single sign-on capability. Simple to set up the failover or high-availability environment. User interface is easy to use, set up, and configure. Can backup and restore configuration data.	Uses a subset of technologies within the OpenAM project that are required by BMC products to provide single sign-on capability. Complex to set up the failover or high-availability environment. User interface is complex to use, set up, and configure. Cannot backup and restore configuration data.
User login workflow	Customizable login page. Log in from the Remedy SSO server login page or from the SAML IdP login page. Single-step login (for a single-tenant environment): Enter the Presentation Server user name and password to log in. Two-step login (for a multi-tenant environment) Step 1: Enter the application domain value of the tenant (realm). Step 2: Enter the Presentation Server user name and password to log in.	Log in from the Presentation Server login page. Single-step login: Enter the Presentation Server user name and password to log in.
Supported authentication types	Local LDAP/AD SAMLv2 Kerberos OpenID Certificate-based	Internal (Local) LDAP/AD
Default tenant (realm)	* (asterisk) is the default tenant (realm).	BmcRealm is the default tenant (realm).
Installation options	Two different installers are available. Remedy SSO server installer: Default Remedy SSO installation program that does not install prerequisite software, such as JRE, Tomcat, and a database. It supports the Microsoft SQL Server, Oracle, and PostgreSQL databases. Remedy SSO for TrueSight installer: A consolidated installation program that installs all of the prerequisite software required to install Remedy SSO for use with TrueSight Presentation Server. It supports only the PostgreSQL database. Note: This is applicable only for version 11.3.01. This is not available for version 11.3.02 or later.	Single consolidated installer.
Communication interface	Uses both a web agent and REST APIs.	Uses only REST APIs.

Where to go from here

Before installing Remedy SSO for the TrueSight Operations Management solution, see Implementation phases for Operations Management and Deployment options for Remedy SSO with TrueSight Operations Management.
Before upgrading the TrueSight Operations Management solution, see Upgrade process overview for the TrueSight Operations Management solution.