Unsupported content

 

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments. Click here to view the documentation for the current version.

Configuring BMC MyIT for BMC Atrium Single Sign-On

Note: BMC Atrium Single Sign-On is not supported for BMC Remedy Action Request System 9.0.01 and later versions. BMC supports only BMC Remedy Single Sign-On with BMC Remedy Action Request System 9.0.01 and later versions.

This topic describes how to configure the integration of BMC Atrium Single Sign-On with both BMC Remedy with Smart IT (Smart IT) and BMC MyIT.

Note

This procedure does not apply to multitenant environments.

BMC Atrium Single Sign-On authentication applies to both the universal client and to mobile applications. When a user logs in to on a mobile device, the user is prompted to enter the host name and port. If the server has SSO enabled, the mobile client opens a browser to the SSO login page. The SSO server sets the SSO cookies after authentication on to the device browser. When the user relaunches the application, if the cookies are not expired, the mobile client displays the application. If the cookies are expired, the user is shown the login page again for authentication.

Before you begin 

  • Install BMC Atrium Single Sign-On and configure realms. For more information, see the BMC Atrium Single Sign-On 9.0 online documentation.
  • Install Smart IT and BMC MyIT.
  • Verify that access to the BMC Atrium SSO servers and the BMC MyIT and Smart IT server requires the same domain. Otherwise, deploying the BMC Atrium Single Sign-On agent will not work.
  • Verify the location of the Web Agent folder or compressed file in the BMC Atrium Single Sign-On installation files at the following location:

    AtriumSSOinstallerDirectory\BMCAtriumSSO\Disk1\files\webagent
    Example:
    location webagent

To enable BMC Atrium Single Sign-On in the Smart IT and BMC MyIT database

  1. Using the system schema login, log in to the Oracle or Microsoft SQL database configured for Smart IT and BMC MyIT during installation.
    The Smart IT and BMC MyIT server is installed with two logins for business schema and system schema. If you do not know the login details, check the database configuration files at TomcatInstallationPath/Tomcat8.0/conf/catalina/localhost/ux.xml

  2. In the TENANT table for all tenants (all entries in the table), set the SAML Authentication field to True.

    You can find the TENANT table under SmartIT_System.



    Microsoft SQL Example: Setting SAML_AUTHENTICATION

  3. Repeat this step each time you add a tenant to the BMC Atrium Single Sign-On configuration.  

To deploy the BMC Atrium Single Sign-On agent and web.xml

For clusters, complete the following procedure for each Smart IT and BMC MyIT server.

  1. Stop the Apache Tomcat server.

  2. Copy the WebAgent folder to any location on the Smart IT and BMC MyIT server, and, if it is a compressed file, extract the files. 

  3. In a Linux shell or DOS command window, go to the WebAgent/Deployer folder. 
  4. Specifying the ssoServer:portmyitUrltomcatServerPathssoAdminName, and ssoAdminPassword values, run the following command with the fully qualified domain names:

    JavaInstallationPath\java -jar deployer.jar --install --container-type tomcatv7 --atrium-sso-url https://ssoServer:port/atriumsso --web-app-url http://myitUrl/ux --container-base-dir tomcatServerPath --admin-name ssoAdminName --admin-pwd ssoAdminPassword

    Tip

    Create a .bat or .sh file with the command so that, if needed, you can modify and run the command, for example, in clusters or server groups. 

    Example: /usr/java/jdk1.8/bin/java -jar deployer.jar --install --container-type tomcatv7 --atrium-sso-url https://vm-sso1.calbro.com:443/atriumsso --web-app-url http://vm1-03.calbro.com/ux --container-base-dir /opt/bmc/apache/tomcat --admin-name admin --admin-pwd Pass1234

  5. Check the output for errors.
  6. Verify that the atssoAgents folder has been created in the Tomcat folder. 
    Example: Apache Software Foundation\Tomcat8.0\atssoAgents
  7. Log in to the BMC Atrium Single Sign-On server, and verify that /ux@myitServer:port exists in the agent list.

  8. Edit the web.xml file in Smart_IT_MyIT/ux/WEB-INF
    (Linux)  /opt/bmc/Smart_IT_MyIT/Smart_IT_MyIT
    (Windows) C:\Program Files\BMC Software\Smart_IT_MyIT\Smart_IT_MyIT\ux\WEB-INF  
  9. Uncomment the BMC Atrium Single Sign-On Web Agent <filter> and <filter-mapping> elements (by deleting <!--  and -->):

        <!-- Atrium SSO webagent filter. Uncomment when needed -->
        <!--
    	<filter>
            <filter-name>Agent</filter-name>
            <filter-class>com.bmc.atrium.sso.agents.web.SSOFilter</filter-class>
        </filter>
        <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/myitapp/*</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/smart-it/*</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/restapi/SSOLogin/*</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/restapi/users/sessions</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/rest/SSOLogin/*</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/rest/users/sessions</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  <filter-mapping>
    		<filter-name>Agent</filter-name> 
    		<url-pattern>/atssologout.html</url-pattern> 
    		<dispatcher>REQUEST</dispatcher> 
    		<dispatcher>INCLUDE</dispatcher> 
    		<dispatcher>FORWARD</dispatcher> 
    		<dispatcher>ERROR</dispatcher> 
    	  </filter-mapping>
    	  -->
  10. Save the web.xml file. 

  11. Restart the Tomcat server for Smart IT.

  12. Log in to Smart IT or BMC MyIT with BMC Atrium Single Sign-On. 

Related topics

Was this page helpful? Yes No Submitting... Thank you

Comments