Configuring tenants for the Presentation Server in Remedy SSO

TrueSight Presentation Server leverages Remedy SSO for authenticating users. In Remedy SSO, you can create tenants (realms), user groups, and users. After installing the TrueSight Presentation Server, you can associate the user groups created in Remedy SSO with the TrueSight Presentation Server authorization profiles. This enables the role-based authorization to features and components of the product.

From the TrueSight console, you can only view the user information. You must perform all modifications to the user information in Remedy SSO.

This section provides information about creating tenants in Remedy SSO and the steps to enable multi-tenancy on the TrueSight Presentation Server.

Before you begin

• You must have installed the Remedy SSO.
• You must have set the Remedy SSO general configurations.

To add tenants (realms) in Remedy SSO

1. Log in to Remedy SSO as an Admin user.

2. Click the Realm tab. 
   The default realm is displayed.

3. Click Add Realm.

   Notes

   • To edit a realm, click the Edit icon  for the realm that you want to edit.

   • To delete a realm, click the Delete icon for the realm that you want to delete. Deletion of a realm results in deletion of all users, groups of the Local User Management authentication under the realm, and all active sessions in this realm. Note that active user sessions may be related to other IdPs as well.
   • Never delete the * tenant (realm) from the Remedy SSO server that is configured with the TrueSight Presentation Server.
   • If you delete a tenant from the Remedy SSO, you must also delete any TrueSight Presentation Server component configured to use that tenant.

4. On the General tab, enter the realm details. For more information about the realm parameters, see Realm parameters.

   Field	Description
   Realm ID	Unique realm identifier. Realm ID must not be more than 80 characters and can only include alphanumeric characters and the following special symbols: *, ., _, and -. Best Practice Although creating duplicate realms is allowed in Remedy SSO, some functionalities in the Presentation Server will not work correctly if this is done. Avoid creating duplicate realms with upper, lower, and mixed case alphabets. For example, if you have an existing realm MyRealm, creating duplicate realms MYREALM, myRealm, myrealm, and so on results in some functionalities not working in the Presentation Server.
   Application Domain(s)	The application domain name for the tenant (realm). The best practice is to have the same value for this field as for the Realm ID field. The application domain name is required for the two step login process in a multi-tenant TrueSight Presentation Server environment. Ensure that you do not add the same application domain value for more than one realm. Notes: The Application Domain(s) field does not accept the uppercase input. Any value entered is automatically transformed to the lowercase. If you are using Remedy SSO version 18.08 or later, for all the custom realms (tenants) you must provide the Presentation Server and Infrastructure Management server host name separated by a comma in the FQDN format as shown in the image. This is not required for the default "*" realm (tenant).

   Note

   Ignore all other fields. They are neither required nor supported by the TrueSight Presentation Server environment.

To enable multi-tenancy in Presentation Server

If you have not enabled multi-tenancy after installing or upgrading the Presentation Server, perform this task. For a single tenant TrueSight Presentation Server environment, you need not enable multi-tenancy. For a multi-tenant TrueSight Presentation Server environment, you must enable the msp parameter using the following procedure:

1. Navigate to the folder based on the operating system on which you installed the TrueSight Presentation Server:

   - (Windows) <Install_Directory>\truesightpserver\modules\tomcat\webapps\ROOT\WEB-INF\classes
   - (Linux) <Install_Directory>/truesightpserver/modules/tomcat/webapps/ROOT/WEB-INF/classes

2. Open the rsso-agent.properties file.
3. Uncomment the msp-deployment=true parameter and save.

4. Navigate to the folder.

   - (Windows) <install_Directory>\truesightpserver\bin
   - (Linux) <install_Directory>/truesightpserver/bin

5. Run the following commands to restart the TrueSight Presentation Server:
tssh server stop
tssh server start

Where to go from here

Configuring user authentication for the Presentation Server in Remedy SSO