Phased rollout


This version of the software is currently available only to early adopter SaaS customers as the first step in our phased rollout.

Configuring preauthentication

As a BMC Helix Single Sign-On administrator, you can configure a realm for preauthentication if a third-party provider is configured to perform authentication. 

Before you begin

Add a realm and configure its general settings.

For more information about how to add and configure a realm, see Adding and configuring realms.

To configure preauthentication

  1. In the User ID field, enter the name of the JWT entry to be used for user identification.


    Because a JWT is generated and provided by a third-party system, the name of the claim containing the User ID is arbitrary. Consult the documentation of your third-party product to find out the actual JWT claim name containing the User ID value used for integration.

  2. In the Certificate field, copy the certificate of the server that signs the JWT. 


    The certificate must be in Privacy Enhanced Mail (PEM) format.

  3. (Optional) To allow an originating application to open a target application through iframe, in the ALLOW-FROM Domain(s) field, enter the name of the originating application. 
    You can specify the target server as follows:
    • * - wildcard. Allowed for all domains.
    • hostname - Allowed for specified domain, ignoring port.
    • hostname:port - Allowed for exact match host:port.
    • proto://hostname:port - Allowed for exact match host:port. 

Was this page helpful? Yes No Submitting... Thank you