Managing users

BMC Atrium Single Sign-On provides basic user and group management features with the internal LDAP server. These features allow an administrator to manage users, groups, and memberships in the groups.

• From the User tab, the administrator can create, delete, and manage user account information including group memberships.
• From the Groups tab, the administrator can manage group memberships.

BMC Atrium Single Sign-On is configured to use an internal LDAP for user authentication (default). While not recommended for large-scale deployments, the internal database can be used for small deployments, demonstrations, and other Proof-Of-Concept (POC) work. For larger deployments, BMC recommends that you use an external authentication server, such as another LDAP server.

To access the User page

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.

New users can only be created when you are using the internal LDAP server for authentication. If an external source is used for authentication, new users must be created within that external system.

When creating a new user, each field that is marked with an asterisk is a required field.

To add a new user

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Click New.
4. In the ID field, enter a unique identifier for the new user.
   This value is used as the user ID when the user logs in.
5. Enter the user's last name and full name.
6. Enter the password and confirm it.
7. In the Status field, verify that the Active radio button is selected (default).
8. Click Save.

The name attributes (First, Full, and Last) can be provided to BMC products to help identify user accounts by using terms that are more user-friendly. The actual use of these attributes, though, is dependent on the BMC product.

To search for users

If the number of users in the Available list is too large to find the user that you want to modify, use the search function. The asterisk (*) returns all user accounts. Enter part of the user ID to refine the user account list.

For example, the pattern, "b*", returns users starting with the letter "b" (case-insensitive) such as "bob" and "Baldwin".

To delete users

User accounts can only be deleted if BMC Atrium Single Sign-On is using the internal LDAP server for user authentication needs.

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Select the check box next to each user account in the User list that should be deleted.
4. Click Delete.
5. Click Ok.

To modify user information

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Select the user link that you want modify.
4. Click Edit
5. Modify the user's information.
6. Click Save.

To enable or disable a user account

The user account can be enabled or disabled by changing the user status.

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Select the user that you want modify.

4. In the Status field, click Active to enable or Inactiveto disable a user account.

   Note

   When a user account is disabled, the user cannot authenticate without losing any of the user attributes, such as group memberships. A user loses group memberships when the user account is deleted.

To add a group membership to a user account

A user is added to a group from the Group tab, however, the Group tab can be accessed from the User Editor pop-up.

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Select the user that you want modify.
4. Select the Group tab.
5. Select a group from the Available Groups list.
6. Click Add.
   Alternatively, click Add All to add all of the available groups to the user account.

7. Click Save.

   Important

   Be selective when adding users to a group, such the Predefined groups, so that elevated privileges are not accidentally assigned to a user. For example, BmcSearchAdmin has privileges to perform searches and BmcAgents has privileges to read configuration information.

To remove a group membership from a user account

A user is removed from a group from the Group tab, however, the Group tab can be accessed from the User Editor pop-up.

1. On the BMC Atrium SSO Admin Console, click Edit BMC Realm.
2. Select the User tab.
3. Select the user that you want modify.
4. Select the Group tab.
5. Select a group from the Member of list.
6. Click Remove.
   Alternatively, click Remove All to remove all of the available groups from the user account.
7. Click Save.

To view user sessions

1. Log on to the BMC Atrium SSO Admin Console.
2. See the Sessions panel.

To terminate an active user session

1. On the BMC Atrium SSO Admin Console.
2. In the Sessions panel, select the check box associated with the user session that you want to terminate.
3. Click Invalidate Session.