Configuring Smart IT for BMC Atrium Single Sign-On

This topic describes how to configure the integration of BMC Atrium Single Sign-On with both BMC Remedy with Smart IT (Smart IT) and BMC MyIT.

BMC Atrium Single Sign-On authentication applies to both the universal client and to mobile applications. When a user logs in to on a mobile device, the user is prompted to enter the host name and port. If the server has SSO enabled, the mobile client opens a browser to the SSO login page. The SSO server sets the SSO cookies after authentication on to the device browser. When the user relaunches the application, if the cookies are not expired, the mobile client displays the application. If the cookies are expired, the user is shown the login page again for authentication.

Before you begin 

• Install BMC Atrium Single Sign-On and configure realms. For more information, see the BMC Atrium Single Sign-On 9.0 online documentation.
• Install Smart IT and BMC MyIT.
• Verify that access to the BMC Atrium SSO servers and the BMC MyIT and Smart IT server requires the same domain. Otherwise, deploying the BMC Atrium Single Sign-On agent will not work.
• Verify the location of the Web Agent folder or compressed file in the BMC Atrium Single Sign-On installation files at the following location:
  

  AtriumSSOinstallerDirectory\BMCAtriumSSO\Disk1\files\webagent
  Example:
  

To enable BMC Atrium Single Sign-On in the Smart IT and BMC MyIT database

1. Using the system schema login, log in to the Oracle or Microsoft SQL database configured for Smart IT and BMC MyIT during installation.
   The Smart IT and BMC MyIT server is installed with two logins for business schema and system schema. If you do not know the login details, check the database configuration files at TomcatInstallationPath/Tomcat8.0/conf/catalina/localhost/ux.xml. 

2. In the TENANT table for all tenants (all entries in the table), set the SAML Authentication field to True.
   

   You can find the TENANT table under SmartIT_System.

   
   
   Microsoft SQL Example: Setting SAML_AUTHENTICATION
   

3. Repeat this step each time you add a tenant to the BMC Atrium Single Sign-On configuration.  

To deploy the BMC Atrium Single Sign-On agent and web.xml

For clusters, complete the following procedure for each Smart IT and BMC MyIT server.

1. Stop the Apache Tomcat server.

2. Copy the WebAgent folder to any location on the Smart IT and BMC MyIT server, and, if it is a compressed file, extract the files. 

3. In a Linux shell or DOS command window, go to the WebAgent/Deployer folder. 

4. Specifying the ssoServer:port, myitUrl, tomcatServerPath, ssoAdminName, and ssoAdminPassword values, run the following command with the fully qualified domain names:
   
   JavaInstallationPath\java -jar deployer.jar --install --container-type tomcatv7 --atrium-sso-url https://ssoServer:port/atriumsso --web-app-url http://myitUrl/ux --container-base-dir tomcatServerPath --admin-name ssoAdminName --admin-pwd ssoAdminPassword

   Tip

   Create a .bat or .sh file with the command so that, if needed, you can modify and run the command, for example, in clusters or server groups. 

   Example: /usr/java/jdk1.8/bin/java -jar deployer.jar --install --container-type tomcatv7 --atrium-sso-url https://vm-sso1.calbro.com:443/atriumsso --web-app-url http://vm1-03.calbro.com/ux --container-base-dir /opt/bmc/apache/tomcat --admin-name admin --admin-pwd Pass1234


5. Check the output for errors.
6. Verify that the atssoAgents folder has been created in the Tomcat folder. 
   Example: Apache Software Foundation\Tomcat8.0\atssoAgents

7. Log in to the BMC Atrium Single Sign-On server, and verify that /ux@myitServer:port exists in the agent list.

8. Edit the web.xml file in Smart_IT_MyIT/ux/WEB-INF. 
   (Linux)  /opt/bmc/Smart_IT_MyIT/Smart_IT_MyIT
   (Windows) C:\Program Files\BMC Software\Smart_IT_MyIT\Smart_IT_MyIT\ux\WEB-INF  

9. Uncomment the BMC Atrium Single Sign-On Web Agent <filter> and <filter-mapping> elements (by deleting <!--  and -->):

       <!-- Atrium SSO webagent filter. Uncomment when needed -->
       <!--
   	<filter>
           <filter-name>Agent</filter-name>
           <filter-class>com.bmc.atrium.sso.agents.web.SSOFilter</filter-class>
       </filter>
       <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/myitapp/*</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/smart-it/*</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/restapi/SSOLogin/*</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/restapi/users/sessions</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/rest/SSOLogin/*</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/rest/users/sessions</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  <filter-mapping>
   		<filter-name>Agent</filter-name> 
   		<url-pattern>/atssologout.html</url-pattern> 
   		<dispatcher>REQUEST</dispatcher> 
   		<dispatcher>INCLUDE</dispatcher> 
   		<dispatcher>FORWARD</dispatcher> 
   		<dispatcher>ERROR</dispatcher> 
   	  </filter-mapping>
   	  -->

10. Save the web.xml file. 

11. Restart the Tomcat server for Smart IT.

12. Log in to Smart IT or BMC MyIT with BMC Atrium Single Sign-On.