Version 9.0 enhancements

Version 9.0 is a major release that contains significant enhancements related to installation, integration, and authentication. BMC Atrium Single Sign-On 9.0 includes the following enhancements.

The following interactive graphic summarizes the BMC Atrium Single Sign-On 9.0 enhancements. (The graphic may take a few seconds to load.)

Unified Installer for BMC Atrium Single Sign-On installation and integration

You can now configure integration between BMC Remedy AR System and BMC Remedy Mid Tier by using the latest BMC Atrium Single Sign-On installer. The installer provides you the option of choosing the type of action you want to perform. You must run the BMC Atrium Single Sign-On installer on the BMC Remedy AR System server and the BMC Remedy Mid Tier server.

For more information on the installer, see Installing BMC Atrium Single Sign-On in different environments.

Managing certificates on the BMC Atrium SSO Admin Console

Starting with this release, you can manage certificates by using the Server Configuration Editor instead of the command-line Keytool utility. This feature allows you to import, export, and add certificates required for secure communication between BMC Atrium Single Sign-On and third-party application servers. For more information, see Managing certificates in BMC Atrium Single Sign-On.

Enhanced SAMLv2 SP and IdP Editors

Starting with this release, SAMLv2 editors are enhanced with the following features:

• You can view certificate details on the Local Identity Provider (IdP) Editor and Local Service Provider (SP) Editor so that you can verify the trust relationship.
• You can enable and view logs on the SP and IdP Editors. These logs are specific to SAMLv2 authentication, and you can view them from the BMC Atrium SSO Admin Console.
• You can now add and view the AD FS metadata from the Remote SP and IdP Editors, making it easier for you to validate the metadata from the BMC Atrium SSO Admin Console.

For more information, see Configuring BMC Atrium Single Sign-On as an SP and Configuring BMC Atrium Single Sign-On as an IdP.

Enhanced Kerberos Editor

Starting with this release, the Kerberos Editor is enhanced with the following features:

• You can now add the password along with the Keytab file for credentials.
• You can enable and view logs on the Kerberos Editor. These logs are specific to Kerberos authentication, and you can view them from the BMC Atrium SSO Admin Console.

For more information, see Configuring the Kerberos module.

Multirealm support

You can now create multiple realms using the BMC Atrium SSO Admin Console. Each realm can have a different Realm Editor, and you can choose a different authentication mechanism for each realm.

For more information, see Managing realms.

Multitenancy support

If you have multiple tenants that you want to authenticate and manage separately, you can extend the multiple-realms feature by using the BMC Atrium SSO Admin Console. Each realm can have a different Realm Editor, and you can define a tenant in each realm. Each tenant can have different authentication mechanism in each realm.

For more information, see Enabling and disabling multi-tenancy support.

Other enhancements

• Updated LDAP Editor — Starting this release, you can configure the timeout values for LDAP operations and connections
• Branding the Login page — Starting this release, you can customize your login page using the Branding feature of BMC Atrium Single Sign-On.
• User ID transformation — Starting this release, you can modify the user ID format by using the UserId Transformer options on the Realm Authentication panel in the Realm Editor.