Logon and logoff experience for end users
When you implement a single sign-on system, the normal authentication behavior is altered for users. If a users starts a second application, the user is logged on automatically.
When you log off, you are logged off from all products integrated with Remedy Single Sign-On (Remedy SSO).
Logon
When a user logs on to the BMC Remedy Mid Tier, the following events are triggered:
- If Remedy SSO is configured for SAML authentication, the access request is redirected by the Remedy SSO web application to the external Identity Provider (IdP); for example, the Active Directory Federation Services (ADFS) logon page.
- If Remedy SSO is configured for BMC Remedy Action Request System (BMC Remedy AR System) authentication, the web application logon page is displayed to the user.
After the user enters valid credentials, a web filter (part of the web agent) that is placed within the web container checks to see if the request is intended for a protected page. If so, it verifies that the user is authenticated and then displays the BMC Remedy Mid Tier UI. If authentication does not occur, the user is redirected to the logon page.
When the user tries to access the BMC Remedy Mid Tier from another browser tab or window, the filter checks for an existing user session, and checks to determine whether or not the user is already logged on. If the user has already logged on, as in this case, the BMC Remedy Mid Tier UI is displayed without the user being prompted for credentials. If the user session does not exist yet, or the user is not already logged on, the filter does the normal token check (from a cookie) and redirects the user to the logon page.
Logoff
When the user logs off, the BMC Remedy Mid Tier web agent sends a request to the web application. A reference counter on the user token table in the web application increments or decrements the application count when the user logs on or logs off an application. The reference counter is implemented by applications that are logged on to by using the Remedy SSO token.
When a user logs off an application but the application count is greater than 0, it means the user is still logged on to one or more applications. In this case, the system does not prompt the user for credentials when user is gaining access to another application.
If the user logs off an application and the application count is 0, it means the user is logged off from Remedy SSO. The user will be prompted for credentials when accessing applications.
Comments
Log in or register to comment.