With active directory you can leverage NTLM, SPNEGO, or BASIC authentication
to authenticate.  At the time you log into your workstation using an active
directory domain account you are granted a Kerberos TGT.  You can use this
TGT to transparently authenticate to the web server regardless of what type
of web server you use (most all web servers support BASIC authentication,
most common web servers support SPNEGO, and to a lesser extent, NTLM).

It's not as easy as checking a box to get it all working, but it is possible
to use what you already have to authenticate without having to manually
provide credentials, in the case of Active Directory, Kerberos Realms, etc.

Axton

On Thu, Jun 30, 2011 at 10:21 AM, Easter, David <david_eas...@bmc.com>wrote:

> There are, of course, multiple ways to address the issue.  Active Directory
> is an authentication source, not an SSO solution, so at some point in the
> process, the credentials do need to be supplied.
>
> Thanks,
>
> David J. Easter
> Product Line Manager
> Remedy Platform
> BMC Software, Inc.
>
>
> -----Original Message-----
> From: Action Request System discussion list(ARSList) [mailto:
> arslist@ARSLIST.ORG] On Behalf Of Danny Kellett
> Sent: Thursday, June 30, 2011 05:07 AM
> To: arslist@ARSLIST.ORG
> Subject: Re: 7.6.04 Mid-Tier and SSO.
>
> No, you have to login to AtriumSSO first. So instead of logging into
> midtier, you login to AtriumSSO.
>
> Also, when it times out, you will have to do it again.
>
> Your options are as follows: A product that if you google for SSO itsm you
> will find it (See how I didn't turn it into an advert there? :)
> Or there is an open source version on the BMC Developer network, which is a
> fantastic start and there is plenty of experienced help here if you get
> stuck compiling etc.
>
> Kind regards
> Danny
>
>
> -----Original Message-----
> From: Action Request System discussion list(ARSList)
> [mailto:arslist@ARSLIST.ORG] On Behalf Of Randy Evans
> Sent: 30 June 2011 12:16
> To: arslist@ARSLIST.ORG
> Subject: Re: 7.6.04 Mid-Tier and SSO.
>
> What were trying to accomplish is the user opens up the web browser and
> either by favorite or link goes directly to our Mid-Tier and doesn't
> have to login.  Currently all our Remedy system s are accessed via the
> User tool, and uses Active Directory to Authenticate.    Does AtriumSSO
> support that?
>
> On 6/29/2011 6:24 PM, Easter, David wrote:
> > If you're on AR System 7.6.04, you may want to consider just using the
> built-in integration with Atrium SSO, depending on to which Enterprise SSO
> product you're integrating.  It may be that this has all been done for you.
> >
> > To what are you integrating?
> >
> > -David J. Easter
> > Manager of Product Management, Remedy Platform
> > BMC Software, Inc.
> >
> > The opinions, statements, and/or suggested courses of action expressed in
> this E-mail do not necessarily reflect those of BMC Software, Inc.  My
> voluntary participation in this forum is not intended to convey a role as a
> spokesperson, liaison or public relations representative for BMC Software,
> Inc.
> >
> > -----Original Message-----
> > From: Action Request System discussion list(ARSList)
> [mailto:arslist@ARSLIST.ORG] On Behalf Of Randy Evans
> > Sent: Wednesday, June 29, 2011 04:08 PM
> > To: arslist@ARSLIST.ORG
> > Subject: 7.6.04 Mid-Tier and SSO.
> >
> > I've got the white paper that describes SSO on the Mid-Tier and has 2
> > examples of how to authenticate, one in C++ and the other In Java.   In
> > the Java example it uses two imports
> >
> > import com.remedy.arsys.session.Authenticator;
> > import com.remedy.arsys.session.UserCredentials;
> >
> >
> > which JAR are these in?   I've added all the ones in the API lib folder,
> > looked through the documenation, I can pull up a
> > com.remedy.arsys.session but then there are no methods or sub classes in
> > it that are public.  I'm very new to Java programming so any clue would
> > help.  Thanks
> >
> > Randy
> >
> >
>
> ____________________________________________________________________________
> ___
> > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> > attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
> >
> >
>
> ____________________________________________________________________________
> ___
> > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> > attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
> >
> >
>
>
> ____________________________________________________________________________
> ___
> UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
>
>
> _______________________________________________________________________________
> UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
>
>
> _______________________________________________________________________________
> UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
>

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

Reply via email to