In addition to functioning as the central server, BMC Atrium Single Sign-On uses web agents which are integrated into each of the BMC products. These agents perform the following functions:
- Authentication services – When a user access an application, the web agent intercepts the request and validates to check if the user has a valid token. In the absence of a valid token, the web agent invokes the Authentication Service for a login page.
- Authorization services – After the user enters the credentials in the login page, the web agent checks the policies of the groups assigned to the user. If the policies are valid for the user, the user is authorized to use the application.
For more information about agent configuration parameters, see Agent manager in multi tenant environment.