Integrating BMC Mobility for ITSM 8.1.00

This topic describes how to integrate BMC Atrium Single Sign-On with BMC Mobility for supporting Security Assertion Markup Language (SAML). The typical process for integrating BMC Atrium Single Sign-On with BMC Remedy IT Service Management (ITSM) is to install BMC Atrium Single Sign-On, install BMC Remedy ITSM, and then integrate Atrium SSO with ITSM.

Following topics are provided:

• • Before you begin
  • Limitations
  • Integrating BMC Mobility to support SAML authentication
  • Related Topics

Before you begin

• Ensure that you have BMC Remedy ITSM installed, before you can enable integration with BMC Atrium Single Sign-On.
• Ensure that users of BMC Remedy ITSM that you want to use, exist in the BMC Atrium Sign-On server. See Managing-users and Managing-user-groups.
  
  

Limitations

• The mobile applications do not support pop-up windows for login. The SAML IdP in Atrium SSO must provide a login page that is compatible with the embedded WebKit browser.
• The only identity provider (IdP) that BMC Mobility for ITSM supports is BMC Atrium SSO, which is the only supported service provider (SP). Other IdPs and SPs are not supported.

Integrating BMC Mobility to support SAML authentication

You must use the following steps for configuring BMC Mobility and BMC Atrium SSO so that BMC Mobility can use single sign-on for logging on to BMC Mobility.

To integrate Atrium SSO support in BMC Mobility Server

1. Stop the BMC Mobility server.
2. Copy all the jar files from the <MidtierInstallDir>\webagent\dist\jee\WEB-INF\lib directory to the <MidtierInstallDir>\WEB-INF\lib directory.
   For example, copy all the jar files from C:\Program Files\BMCSoftware\ARSystem\midtier\webagent\dist\jee\WEB-INF\lib to C:\Program Files\BMCSoftware\ARSystem\midtier\WEB-INF\lib.
3. Uncomment the BMC Atrium Single Sign-On filter in the web.xml file on BMC Mobility server.

To integrate BMC Mobility in BMC Atrium SSO Console

1. Configure the Login URl for the BMC Atrium Single Sign-On server using following steps:
   1. Log on to the BMC Atrium SSO Admin Console and click Agent Details.
   2. Select the /MobilityServer@FQDN:portNumber agent and click Edit.

   3. In the Agent Editor, change the Login URl to be the same as the Mid Tier Agent Login URl (for example, https://serverName:portNumber/atriumsso/spssoinit?metaAlias=/BmcRealm/sp&idpEntityID=idp). 

      Login URl field in the Agent Editor
      Click the following figure to expand it.

      

2. Configure the Logout URl for the BMC Atrium Single Sign-On server using following steps:
   
   1. In the Agent Editor, change the Logout URl to be the same as the Mid Tier Agent Logout URl (for example, https://serverName:portNumber/atriumsso/saml2/jsp/spSingleLogoutInit.jsp?idpEntityID=idp).

To enable SAML logon

1. Open the Mobility Administration: Tenant form in a browser.
2. Search for the record with Tenant ID 000000000000001.
3. Change the SAML Authentication setting to Yes.
4. Save your changes.

You must start the BMC Mobility server after making the configuration changes.

Related Topics

• Agent-manager