Reviewing AR server external authentication settings and configuring group mapping
Before you can properly configure BMC Atrium Single Sign-On, you must configure group mapping for external authentication in the BMC Remedy AR System server.
Before you begin
Make sure that the AREA LDAP plug-in is properly configured.
To configure external authentication for AR System
- Use a browser to log on to the AR System server (by using the mid tier).
For example:
http://midTier:8080/arsys - Open the AR System Administration Console.
- Open the Server Information window by selecting System > General > Server Information.
- Click the EA tab
(Click the following image to expand it.)
Verify the following information:
Field
Value
External Authentication Server RPC Program Number
390695
External Authentication Server Timeout (seconds) RPC
80
External Authentication Server Timeout (seconds) Need To Sync
300 (default)
- Verify that Authenticate Unregistered Users is selected.
- Verify that Authentication Chaining Mode is set to ARS-AREA.
- Set the Group Mapping.
For example, you can map the Atrium Single Sign-On group BmcAdmins to the AR group Administrator. - Click OK.
Where to go from here
Was this page helpful? Yes No
Submitting...
Thank you
Comments
I think it's required to restart AR after settings this up. Should we add a note?
Can this be used to map MS Active Directory groups to AR groups?
Hi Steve,
You can map the MS Active Directory group to AR groups using an LDAP user store. You must create an LDAP user store in BMC Atrium SSO Admin Console to access the AD group information of the user. Then, you should map the external AD group to the internal AR group through the table on EA tab of Server Information form as mentioned on this page.
For information about creating LDAP user store, see Using LDAP (Active Directory) for authentication.
Thanks!
-Abhay
I appreciate the reply, however we don't use Atrium. Is there no way to map AD groups to Remedy groups from the mid-tier admin console? Is console's EA tab used to config Atrium only?
Hi Steve,
The concerned SME is looking into this issue. I will confirm an answer to your query shortly.
Thanks!
-Abhay
Hi Steve,
Thank you for your patience. You can map the AD groups to Remedy groups even if you are not using BMC Atrium Single Sign-On.
For more information you can visit the following page on AR System documentation site:
https://docs.bmc.com/docs/display/public/ars81/AR+System+external+authentication
Please let me know if this helps you!
Thank you!
-Abhay
Log in or register to comment.