Re: SSO via user tool

2006-09-01 Thread Watson Benjamin A Contr AFWA/XOO
Title: Re: SSO via user tool
**








Carolyn,

 

Please contact me off list at:

 

[EMAIL PROTECTED]

 

 









From: Action Request
System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Wixson Carolyn L PSNS
Sent: Thursday, August 31, 2006
3:32 PM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool



 





Benjamin,





 





We are also CAC enabled. We need to get
the mid-tier up for Requesters to submit tickets. Our management does not want
them to see a login screen.





 





Can you share your CAC solution?





 





We are currently using:





  ARS ver 5.1.2





  HelpDesk ver 5.6





 





We may be upgrading to ARS ver 6.3 very
soon.





 





Any help you can give will be GREATLY
appreciated.





Carolyn
Wixson 
(360)
476-6197
PSNS & IMF
Remedy ARS Administrator 






__20060125___This posting was submitted with HTML in it___
__20060125___This posting was submitted with HTML in it___

Re: SSO via user tool

2006-08-31 Thread McKenzie, James J C-E LCMC HQISEC/L3
Title: Re: SSO via user tool
**



Carolyn:
 
Please advise how off list.
 
James McKenzie
L-3 GSI


From: Action Request System discussion 
list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Wixson Carolyn L 
PSNSSent: Thursday, August 31, 2006 1:32 PMTo: 
arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool
** 


Benjamin,
 
We are 
also CAC enabled. We need to get the mid-tier up for Requesters to submit 
tickets. Our management does not want them to see a login 
screen.
 
Can 
you share your CAC solution?
 
We are 
currently using:
  
ARS ver 5.1.2
  
HelpDesk ver 5.6
 
We may 
be upgrading to ARS ver 6.3 very soon.
 
Any 
help you can give will be GREATLY appreciated.
Carolyn Wixson (360) 476-6197PSNS & 
IMFRemedy ARS Administrator 


  -Original Message-From: Watson Benjamin A Contr 
  AFWA/XOO [mailto:[EMAIL PROTECTED]Sent: Friday, 
  August 04, 2006 10:31To: arslist@ARSLIST.ORGSubject: Re: 
  [ARSLIST] SSO via user tool** 
  
  I tend to agree with Scott in that a majority of the 
  solutions I found were "glorified password managers" that would essentially 
  store/encrypt user passwords locally.  The user could then associate a 
  stored password to an application and, upon launching the application, the 
  password manager would supply the data.
   
  In our particular shop, we had Remedy set up to 
  authenticate against the network, but that functionality went away when we 
  transitioned to DoD Common Access Cards (CAC) to access the 
  LAN.
   
  One of the developers I worked with was clever enough to 
  write his own application to read the credentials from the CAC and use that to 
  authenticate and log into Remedy.  This functionality has been mirrored 
  to the web.  The only "slightly" annoying thing is that you must enter 
  your PIN, but it works.
   
  This approach is nice in that smart card login can handle 
  verifying that the credientials on the CAC against a certificate authority 
  when accessing the LAN, which has all been invented 
before.
   
  
  //SIGNED//BENJAMIN A WATSON, Contractor, 
  AFWA/XOOSAIC - Remedy TeamCommercial: (402) 294-8225DSN: 
  271-8225mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]
   
  
  
  From: Action Request System discussion 
  list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
  HammonsSent: Friday, August 04, 2006 11:44 AMTo: 
  arslist@ARSLIST.ORGSubject: Re: SSO via user 
  tool
  ** 
  
  
  I believe Doug may be 
  referring to the built in integration to provide an SSO functionality against 
  an LDAP store.  If this is the case, this is just telling Remedy to use 
  the LDAP store to handle the authentication.  This would then handle the 
  SSO functionality for both the web app and the client.  I could be wrong, 
  but this is my assumption. If Doug could clarify this, it would be 
  helpful in understanding the stated direction for Remedy.
   
  Having said that, I just worked with a 
  client who did a major comparison between the leading "SSO" vendors on the 
  market.  All of them could be characterized as "password management with 
  a nomenclature of sso" Some work better than others, but essentially they 
  are all pitching the same thing.  
   
  For a true "SSO" solution, you would have 
  to a have central repository that all applications could reference for 
  authentication information.  LDAP is the closest your going to get to 
  that and not all applications support LDAP integration.  As a matter of 
  fact, most applications handle authentication individually with their own 
  login interfaces.  So the closest thing you have in the marketplace today 
  for SSO is "password management" applications that will allow users to 
  manage their credentials to all their required applications.  To the end 
  user this still provides the "SSO" experience regardless of how it is handled 
  on the backend.  
   
  It's good to see this discussion 
  taking place in the ARSList, as this seems to be the hot topic 
  across most industries today.    I'm looking 
  forward to ongoing discussions in this area.
   
  Just my .02.
   
  Scott
   
   
   
  
  
  From: Action Request System discussion 
  list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 
  08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user 
  tool
  
  I was told by Doug.. that there would be Built in 
  Functionality on theusertool to do this already.. no documentation on it.. 
  but it isthere..now.. with that said.. I have a ticket in on this and 
  have recieved nofeedback on the latest.. I am planning on following up on 
  this nextweek.. I hope.I know I had issues with the original version 
  of their plugin.. (remedy's)it worked with a userid and a password.. well 
  we don't do that anymore.. so..But do not know the latest...I 
  understood clearly that the same functionality that gives you sso 
  onmid-tier is built into the client t

Re: SSO via user tool

2006-08-31 Thread Wixson Carolyn L PSNS
Title: Re: SSO via user tool
**




Benjamin,
 
We are 
also CAC enabled. We need to get the mid-tier up for Requesters to submit 
tickets. Our management does not want them to see a login 
screen.
 
Can 
you share your CAC solution?
 
We are 
currently using:
  
ARS ver 5.1.2
  
HelpDesk ver 5.6
 
We may 
be upgrading to ARS ver 6.3 very soon.
 
Any 
help you can give will be GREATLY appreciated.
Carolyn Wixson (360) 476-6197PSNS & 
IMFRemedy ARS Administrator 


  -Original Message-From: Watson Benjamin A Contr 
  AFWA/XOO [mailto:[EMAIL PROTECTED]Sent: Friday, 
  August 04, 2006 10:31To: arslist@ARSLIST.ORGSubject: Re: 
  [ARSLIST] SSO via user tool** 
  
  I tend to agree with Scott in that a majority of the 
  solutions I found were "glorified password managers" that would essentially 
  store/encrypt user passwords locally.  The user could then associate a 
  stored password to an application and, upon launching the application, the 
  password manager would supply the data.
   
  In our particular shop, we had Remedy set up to 
  authenticate against the network, but that functionality went away when we 
  transitioned to DoD Common Access Cards (CAC) to access the 
  LAN.
   
  One of the developers I worked with was clever enough to 
  write his own application to read the credentials from the CAC and use that to 
  authenticate and log into Remedy.  This functionality has been mirrored 
  to the web.  The only "slightly" annoying thing is that you must enter 
  your PIN, but it works.
   
  This approach is nice in that smart card login can handle 
  verifying that the credientials on the CAC against a certificate authority 
  when accessing the LAN, which has all been invented 
before.
   
  
  //SIGNED//BENJAMIN A WATSON, Contractor, 
  AFWA/XOOSAIC - Remedy TeamCommercial: (402) 294-8225DSN: 
  271-8225mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]
   
  
  
  From: Action Request System discussion 
  list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
  HammonsSent: Friday, August 04, 2006 11:44 AMTo: 
  arslist@ARSLIST.ORGSubject: Re: SSO via user 
  tool
  ** 
  
  
  I believe Doug may be 
  referring to the built in integration to provide an SSO functionality against 
  an LDAP store.  If this is the case, this is just telling Remedy to use 
  the LDAP store to handle the authentication.  This would then handle the 
  SSO functionality for both the web app and the client.  I could be wrong, 
  but this is my assumption. If Doug could clarify this, it would be 
  helpful in understanding the stated direction for Remedy.
   
  Having said that, I just worked with a 
  client who did a major comparison between the leading "SSO" vendors on the 
  market.  All of them could be characterized as "password management with 
  a nomenclature of sso" Some work better than others, but essentially they 
  are all pitching the same thing.  
   
  For a true "SSO" solution, you would have 
  to a have central repository that all applications could reference for 
  authentication information.  LDAP is the closest your going to get to 
  that and not all applications support LDAP integration.  As a matter of 
  fact, most applications handle authentication individually with their own 
  login interfaces.  So the closest thing you have in the marketplace today 
  for SSO is "password management" applications that will allow users to 
  manage their credentials to all their required applications.  To the end 
  user this still provides the "SSO" experience regardless of how it is handled 
  on the backend.  
   
  It's good to see this discussion 
  taking place in the ARSList, as this seems to be the hot topic 
  across most industries today.    I'm looking 
  forward to ongoing discussions in this area.
   
  Just my .02.
   
  Scott
   
   
   
  
  
  From: Action Request System discussion 
  list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 
  08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user 
  tool
  
  I was told by Doug.. that there would be Built in 
  Functionality on theusertool to do this already.. no documentation on it.. 
  but it isthere..now.. with that said.. I have a ticket in on this and 
  have recieved nofeedback on the latest.. I am planning on following up on 
  this nextweek.. I hope.I know I had issues with the original version 
  of their plugin.. (remedy's)it worked with a userid and a password.. well 
  we don't do that anymore.. so..But do not know the latest...I 
  understood clearly that the same functionality that gives you sso 
  onmid-tier is built into the client tool so that you can SSO exactly 
  thesame way.. using there plug-in.. they (suppose to anyway) have 
  asample with all the code and plug-in stuff into a windows based 
  file..and once compiled it just works.. so..The other ones listed 
  here.. I understood to be more of a 

Re: SSO via user tool

2006-08-04 Thread Scott Hammons
Tyrone,
 
The SSO packages available, that I'm aware of, provide "features" listed below. 
 These are part of the base product for many standard SSO vendors.  Any SSO 
application is going to require some sort of configuration.
 
Scott



From: Action Request System discussion list(ARSList) on behalf of Tyrone Dee
Sent: Fri 8/4/2006 13:35
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
Is there a package out there that is just SSO instead of all these other 
features?
 
Thanks!



From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Watson Benjamin A Contr AFWA/XOO
Sent: August 4, 2006 1:31 PM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
I tend to agree with Scott in that a majority of the solutions I found were 
"glorified password managers" that would essentially store/encrypt user 
passwords locally.  The user could then associate a stored password to an 
application and, upon launching the application, the password manager would 
supply the data.
 
In our particular shop, we had Remedy set up to authenticate against the 
network, but that functionality went away when we transitioned to DoD Common 
Access Cards (CAC) to access the LAN.
 
One of the developers I worked with was clever enough to write his own 
application to read the credentials from the CAC and use that to authenticate 
and log into Remedy.  This functionality has been mirrored to the web.  The 
only "slightly" annoying thing is that you must enter your PIN, but it works.
 
This approach is nice in that smart card login can handle verifying that the 
credientials on the CAC against a certificate authority when accessing the LAN, 
which has all been invented before.
 

//SIGNED//
BENJAMIN A WATSON, Contractor, AFWA/XOO
SAIC - Remedy Team
Commercial: (402) 294-8225
DSN: 271-8225
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]

 



From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Scott Hammons
Sent: Friday, August 04, 2006 11:44 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
I believe Doug may be referring to the built in integration to provide an SSO 
functionality against an LDAP store.  If this is the case, this is just telling 
Remedy to use the LDAP store to handle the authentication.  This would then 
handle the SSO functionality for both the web app and the client.  I could be 
wrong, but this is my assumption. If Doug could clarify this, it would be 
helpful in understanding the stated direction for Remedy.
 
Having said that, I just worked with a client who did a major comparison 
between the leading "SSO" vendors on the market.  All of them could be 
characterized as "password management with a nomenclature of sso" Some work 
better than others, but essentially they are all pitching the same thing.  
 
For a true "SSO" solution, you would have to a have central repository that all 
applications could reference for authentication information.  LDAP is the 
closest your going to get to that and not all applications support LDAP 
integration.  As a matter of fact, most applications handle authentication 
individually with their own login interfaces.  So the closest thing you have in 
the marketplace today for SSO is "password management" applications that will 
allow users to manage their credentials to all their required applications.  To 
the end user this still provides the "SSO" experience regardless of how it is 
handled on the backend.  
 
It's good to see this discussion taking place in the ARSList, as this seems to 
be the hot topic across most industries today.I'm looking forward to 
ongoing discussions in this area.
 
Just my .02.
 
Scott
 
 
 



From: Action Request System discussion list(ARSList) on behalf of patrick zandi
Sent: Fri 8/4/2006 08:52
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool



I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a passwor

Re: SSO via user tool

2006-08-04 Thread Tyrone Dee
Title: Re: SSO via user tool
**



Is there a package out there that is just SSO instead of 
all these other features?
 
Thanks!


From: Action Request System discussion 
list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Watson Benjamin A 
Contr AFWA/XOOSent: August 4, 2006 1:31 PMTo: 
arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool
** 

I tend to agree with Scott in that a majority of the 
solutions I found were "glorified password managers" that would essentially 
store/encrypt user passwords locally.  The user could then associate a 
stored password to an application and, upon launching the application, the 
password manager would supply the data.
 
In our particular shop, we had Remedy set up to 
authenticate against the network, but that functionality went away when we 
transitioned to DoD Common Access Cards (CAC) to access the 
LAN.
 
One of the developers I worked with was clever enough to 
write his own application to read the credentials from the CAC and use that to 
authenticate and log into Remedy.  This functionality has been mirrored to 
the web.  The only "slightly" annoying thing is that you must enter your 
PIN, but it works.
 
This approach is nice in that smart card login can handle 
verifying that the credientials on the CAC against a certificate authority when 
accessing the LAN, which has all been invented before.
 

//SIGNED//BENJAMIN A WATSON, Contractor, 
AFWA/XOOSAIC - Remedy TeamCommercial: (402) 294-8225DSN: 
271-8225mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]
 


From: Action Request System discussion 
list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
HammonsSent: Friday, August 04, 2006 11:44 AMTo: 
arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool
** 


I believe Doug may be 
referring to the built in integration to provide an SSO functionality against an 
LDAP store.  If this is the case, this is just telling Remedy to use the 
LDAP store to handle the authentication.  This would then handle the SSO 
functionality for both the web app and the client.  I could be wrong, but 
this is my assumption. If Doug could clarify this, it would be helpful in 
understanding the stated direction for Remedy.
 
Having said that, I just worked with a 
client who did a major comparison between the leading "SSO" vendors on the 
market.  All of them could be characterized as "password management with a 
nomenclature of sso" Some work better than others, but essentially they are 
all pitching the same thing.  
 
For a true "SSO" solution, you would have 
to a have central repository that all applications could reference for 
authentication information.  LDAP is the closest your going to get to that 
and not all applications support LDAP integration.  As a matter of fact, 
most applications handle authentication individually with their own login 
interfaces.  So the closest thing you have in the marketplace today for SSO 
is "password management" applications that will allow users to manage their 
credentials to all their required applications.  To the end user this still 
provides the "SSO" experience regardless of how it is handled on the 
backend.  
 
It's good to see this discussion 
taking place in the ARSList, as this seems to be the hot topic 
across most industries today.    I'm looking 
forward to ongoing discussions in this area.
 
Just my .02.
 
Scott
 
 
 


From: Action Request System discussion 
list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 
08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool

I was told by Doug.. that there would be Built in Functionality 
on theusertool to do this already.. no documentation on it.. but it 
isthere..now.. with that said.. I have a ticket in on this and have 
recieved nofeedback on the latest.. I am planning on following up on this 
nextweek.. I hope.I know I had issues with the original version of their 
plugin.. (remedy's)it worked with a userid and a password.. well we don't do 
that anymore.. so..But do not know the latest...I understood clearly 
that the same functionality that gives you sso onmid-tier is built into the 
client tool so that you can SSO exactly thesame way.. using there plug-in.. 
they (suppose to anyway) have asample with all the code and plug-in stuff 
into a windows based file..and once compiled it just works.. so..The 
other ones listed here.. I understood to be more of a passwordmanagment with 
a nomenclature of sso.. which they are not, to includethe one remedy 
sells.On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> 
wrote:> Scott - I would be interested in pricing and 
information.>> Thanks!>>>> 
-Original Message-> From: Action Request System discussion 
list(ARSList)> [mailto:arslist@ARSLIST.ORG] On Behalf Of 
Scott Hammons> Sent: August 3, 2006 1:54 PM> To: 
arslist@ARSLIST.ORG> Subject: Re: SSO via user tool>> 
Richard,>> As

Re: SSO via user tool

2006-08-04 Thread patrick zandi

Scott, SSO Experience is what most are looking for.. not Security.
Remedy's solution is built around there plug-in.. that is current..
just expanded a little.
LDAP would be a way to go.. it is set up on a Verifying Sequence of events..
Verify who you are.. Verify the Mid-tier is the Mid-tier, Verify that
the server is the Server, Verify the customer info to the ldap store..
With a userid password or userid and key/certificate.. etc.  Then let
them have there permissions..

I have not Delved into it just yet.. But I know someone out there that
I chatted to .. who said they would help.. some..
Hopefully.. they will..

On 8/4/06, Scott Hammons <[EMAIL PROTECTED]> wrote:

**

I believe Doug may be referring to the built in integration to provide an
SSO functionality against an LDAP store.  If this is the case, this is just
telling Remedy to use the LDAP store to handle the authentication.  This
would then handle the SSO functionality for both the web app and the client.
 I could be wrong, but this is my assumption. If Doug could clarify this, it
would be helpful in understanding the stated direction for Remedy.

Having said that, I just worked with a client who did a major comparison
between the leading "SSO" vendors on the market.  All of them could be
characterized as "password management with a nomenclature of sso" Some
work better than others, but essentially they are all pitching the same
thing.

For a true "SSO" solution, you would have to a have central repository that
all applications could reference for authentication information.  LDAP is
the closest your going to get to that and not all applications support LDAP
integration.  As a matter of fact, most applications handle authentication
individually with their own login interfaces.  So the closest thing you have
in the marketplace today for SSO is "password management" applications that
will allow users to manage their credentials to all their required
applications.  To the end user this still provides the "SSO" experience
regardless of how it is handled on the backend.

It's good to see this discussion taking place in the ARSList, as this seems
to be the hot topic across most industries today.I'm looking forward to
ongoing discussions in this area.

Just my .02.

Scott





From: Action Request System discussion list(ARSList) on behalf of patrick
zandi
Sent: Fri 8/4/2006 08:52
To: arslist@ARSLIST.ORG

Subject: Re: SSO via user tool


Subject: Re: SSO via user tool



I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore..
so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:
> Scott - I would be interested in pricing and information.
>
> Thanks!
>
>
>
> -Original Message-
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of Scott Hammons
> Sent: August 3, 2006 1:54 PM
> To: arslist@ARSLIST.ORG
> Subject: Re: SSO via user tool
>
> Richard,
>
> As Garron mentioned there is a 3rd Party solution from a company called
> Passlogix that provides this capability.  It is actually not to hard to
> setup and configure for Remedy.   I've deployed the IBM branded version
> against the Remedy Web Interface, the Remedy user tool, and the Remedy
alert
> tool.
>
> You can obtain the product from a number of vendors including Passlogix
> directly, BMC (which is OEMing the Passlogix product), or IBM (which is
> OEMing the same product).
>
> While this will resolve the immediate need for providing SSO functionality
> to the Remedy User tool, it will also assist the company as a whole by
> giving them the capability to provide SSO to most web-based, windows
based,
> and host based applications beyond Remedy.
>
> Let me know if you want information on pricing because we can resell both
> the Passlogix and IBM versions.
>
> HTH,
>
> Scott
>
> 
>
> From: Actio

Re: SSO via user tool

2006-08-04 Thread Scott Hammons
Fred,
 
Thanks for the info.  I'll look back and see if I can get a copy of this.  It's 
probably interesting to read.
 
Scott



From: Action Request System discussion list(ARSList) on behalf of Grooms, 
Frederick W
Sent: Fri 8/4/2006 12:30
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
Doug replied to Patrick and I that there is an updated white paper that talks 
about the technology to intercept the login page for SSO and other technologies 
that need an alternate login strategy up on the support site .  
 
It discusses the ability to have plugins that intercept the login page on both 
the Web (available since 6.3) and Windows (available as of 7.0) and the 
associated AREA plugin (available since 6.0) to do the validation.  There is a 
simple shell program for both the Web and Windows in the white paper.
 
I pulled it down and quickly glanced thru it.  In the Windows section it talks 
about the 7.0 client having the ability to call a user made DLL (on the Windows 
client PC) to handle the SSO authentication.  I found the white paper in the 
documentation section of the support site with the ARS 7.0 documents.
 
Fred
 


From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Scott Hammons
Sent: Friday, August 04, 2006 11:44 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
I believe Doug may be referring to the built in integration to provide an SSO 
functionality against an LDAP store.  If this is the case, this is just telling 
Remedy to use the LDAP store to handle the authentication.  This would then 
handle the SSO functionality for both the web app and the client.  I could be 
wrong, but this is my assumption. If Doug could clarify this, it would be 
helpful in understanding the stated direction for Remedy.
 
Having said that, I just worked with a client who did a major comparison 
between the leading "SSO" vendors on the market.  All of them could be 
characterized as "password management with a nomenclature of sso" Some work 
better than others, but essentially they are all pitching the same thing.  
 
For a true "SSO" solution, you would have to a have central repository that all 
applications could reference for authentication information.  LDAP is the 
closest your going to get to that and not all applications support LDAP 
integration.  As a matter of fact, most applications handle authentication 
individually with their own login interfaces.  So the closest thing you have in 
the marketplace today for SSO is "password management" applications that will 
allow users to manage their credentials to all their required applications.  To 
the end user this still provides the "SSO" experience regardless of how it is 
handled on the backend.  
 
It's good to see this discussion taking place in the ARSList, as this seems to 
be the hot topic across most industries today.I'm looking forward to 
ongoing discussions in this area.
 
Just my .02.
 
Scott
 


From: Action Request System discussion list(ARSList) on behalf of patrick zandi
Sent: Fri 8/4/2006 08:52
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool



I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:
> Scott - I would be interested in pricing and information.
>
> Thanks!
>
>
>
> -Original Message-
> From: Action Request System discussion list(ARSList)
> [mailto:arslist@ARSLIST.ORG <mailto:arslist@ARSLIST.ORG> ] On Behalf Of Scott 
> Hammons
> Sent: August 3, 2006 1:54 PM
> To: arslist@ARSLIST.ORG
> Subject: Re: SSO via user tool
>
> Richard,
>
> As Garron mentioned there is a 3rd Party solution from a company called
> Passlogix that provides this capability.  It is actually not to hard to
> setup and configure for Remedy.   I've deployed the IBM branded version
> aga

Re: SSO via user tool

2006-08-04 Thread Scott Hammons
The suite of products I mentioned previosuly also allow the credentials to be 
stored centrally as well as locally.  For example, this would make it easier 
for the user in an AD environment by allowing them to access their credentials 
from anywhere within the domain.  The encryption mechanism used can be chosen 
and is based on the leading technologies in the market.  They have like 9 
different ones that are provided OTB.
 
Scott



From: Action Request System discussion list(ARSList) on behalf of Watson 
Benjamin A Contr AFWA/XOO
Sent: Fri 8/4/2006 12:30
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
I tend to agree with Scott in that a majority of the solutions I found were 
"glorified password managers" that would essentially store/encrypt user 
passwords locally.  The user could then associate a stored password to an 
application and, upon launching the application, the password manager would 
supply the data.
 
In our particular shop, we had Remedy set up to authenticate against the 
network, but that functionality went away when we transitioned to DoD Common 
Access Cards (CAC) to access the LAN.
 
One of the developers I worked with was clever enough to write his own 
application to read the credentials from the CAC and use that to authenticate 
and log into Remedy.  This functionality has been mirrored to the web.  The 
only "slightly" annoying thing is that you must enter your PIN, but it works.
 
This approach is nice in that smart card login can handle verifying that the 
credientials on the CAC against a certificate authority when accessing the LAN, 
which has all been invented before.
 

//SIGNED//
BENJAMIN A WATSON, Contractor, AFWA/XOO
SAIC - Remedy Team
Commercial: (402) 294-8225
DSN: 271-8225
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]

 



From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Scott Hammons
Sent: Friday, August 04, 2006 11:44 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 
I believe Doug may be referring to the built in integration to provide an SSO 
functionality against an LDAP store.  If this is the case, this is just telling 
Remedy to use the LDAP store to handle the authentication.  This would then 
handle the SSO functionality for both the web app and the client.  I could be 
wrong, but this is my assumption. If Doug could clarify this, it would be 
helpful in understanding the stated direction for Remedy.
 
Having said that, I just worked with a client who did a major comparison 
between the leading "SSO" vendors on the market.  All of them could be 
characterized as "password management with a nomenclature of sso" Some work 
better than others, but essentially they are all pitching the same thing.  
 
For a true "SSO" solution, you would have to a have central repository that all 
applications could reference for authentication information.  LDAP is the 
closest your going to get to that and not all applications support LDAP 
integration.  As a matter of fact, most applications handle authentication 
individually with their own login interfaces.  So the closest thing you have in 
the marketplace today for SSO is "password management" applications that will 
allow users to manage their credentials to all their required applications.  To 
the end user this still provides the "SSO" experience regardless of how it is 
handled on the backend.  
 
It's good to see this discussion taking place in the ARSList, as this seems to 
be the hot topic across most industries today.I'm looking forward to 
ongoing discussions in this area.
 
Just my .02.
 
Scott
 
 
 



From: Action Request System discussion list(ARSList) on behalf of patrick zandi
Sent: Fri 8/4/2006 08:52
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool



I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EM

Re: SSO via user tool

2006-08-04 Thread Watson Benjamin A Contr AFWA/XOO
Title: Re: SSO via user tool
**



I tend to agree with Scott in that a majority of the 
solutions I found were "glorified password managers" that would essentially 
store/encrypt user passwords locally.  The user could then associate a 
stored password to an application and, upon launching the application, the 
password manager would supply the data.
 
In our particular shop, we had Remedy set up to 
authenticate against the network, but that functionality went away when we 
transitioned to DoD Common Access Cards (CAC) to access the 
LAN.
 
One of the developers I worked with was clever enough to 
write his own application to read the credentials from the CAC and use that to 
authenticate and log into Remedy.  This functionality has been mirrored to 
the web.  The only "slightly" annoying thing is that you must enter your 
PIN, but it works.
 
This approach is nice in that smart card login can handle 
verifying that the credientials on the CAC against a certificate authority when 
accessing the LAN, which has all been invented before.
 

//SIGNED//BENJAMIN A WATSON, Contractor, 
AFWA/XOOSAIC - Remedy TeamCommercial: (402) 294-8225DSN: 
271-8225mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]
 


From: Action Request System discussion 
list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
HammonsSent: Friday, August 04, 2006 11:44 AMTo: 
arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool
** 


I believe Doug may be 
referring to the built in integration to provide an SSO functionality against an 
LDAP store.  If this is the case, this is just telling Remedy to use the 
LDAP store to handle the authentication.  This would then handle the SSO 
functionality for both the web app and the client.  I could be wrong, but 
this is my assumption. If Doug could clarify this, it would be helpful in 
understanding the stated direction for Remedy.
 
Having said that, I just worked with a 
client who did a major comparison between the leading "SSO" vendors on the 
market.  All of them could be characterized as "password management with a 
nomenclature of sso" Some work better than others, but essentially they are 
all pitching the same thing.  
 
For a true "SSO" solution, you would have 
to a have central repository that all applications could reference for 
authentication information.  LDAP is the closest your going to get to that 
and not all applications support LDAP integration.  As a matter of fact, 
most applications handle authentication individually with their own login 
interfaces.  So the closest thing you have in the marketplace today for SSO 
is "password management" applications that will allow users to manage their 
credentials to all their required applications.  To the end user this still 
provides the "SSO" experience regardless of how it is handled on the 
backend.  
 
It's good to see this discussion 
taking place in the ARSList, as this seems to be the hot topic 
across most industries today.    I'm looking 
forward to ongoing discussions in this area.
 
Just my .02.
 
Scott
 
 
 


From: Action Request System discussion 
list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 
08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool

I was told by Doug.. that there would be Built in Functionality 
on theusertool to do this already.. no documentation on it.. but it 
isthere..now.. with that said.. I have a ticket in on this and have 
recieved nofeedback on the latest.. I am planning on following up on this 
nextweek.. I hope.I know I had issues with the original version of their 
plugin.. (remedy's)it worked with a userid and a password.. well we don't do 
that anymore.. so..But do not know the latest...I understood clearly 
that the same functionality that gives you sso onmid-tier is built into the 
client tool so that you can SSO exactly thesame way.. using there plug-in.. 
they (suppose to anyway) have asample with all the code and plug-in stuff 
into a windows based file..and once compiled it just works.. so..The 
other ones listed here.. I understood to be more of a passwordmanagment with 
a nomenclature of sso.. which they are not, to includethe one remedy 
sells.On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> 
wrote:> Scott - I would be interested in pricing and 
information.>> Thanks!>>>> 
-Original Message-> From: Action Request System discussion 
list(ARSList)> [mailto:arslist@ARSLIST.ORG] On Behalf Of 
Scott Hammons> Sent: August 3, 2006 1:54 PM> To: 
arslist@ARSLIST.ORG> Subject: Re: SSO via user tool>> 
Richard,>> As Garron mentioned there is a 3rd Party solution from 
a company called> Passlogix that provides this capability.  It is 
actually not to hard to> setup and configure for Remedy.   I've 
deployed the IBM branded version> against the Remedy Web Interface, the 
Remedy user tool, and the Remedy ale

Re: SSO via user tool

2006-08-04 Thread Grooms, Frederick W
Title: Re: SSO via user tool
**



Doug replied to Patrick and I that there is 
an updated white paper that talks about the technology to 
intercept the login page for SSO and other technologies that need an alternate 
login strategy up on the support site .  
 
It discusses the ability to have plugins that intercept the 
login page on both the Web (available since 6.3) and Windows (available as of 
7.0) and the associated AREA plugin (available since 6.0) to do the 
validation.  There is a simple shell program for both the Web and Windows 
in the white paper.
 
I pulled it down and quickly glanced thru it.  In the 
Windows section it talks about the 7.0 client having the ability to call a user 
made DLL (on the Windows client PC) to handle the SSO authentication.  I 
found the white paper in the documentation section of the support 
site with the ARS 7.0 documents.
 
Fred
 


From: Action Request System discussion 
list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
HammonsSent: Friday, August 04, 2006 11:44 AMTo: 
arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool
** 


I believe Doug may be 
referring to the built in integration to provide an SSO functionality against an 
LDAP store.  If this is the case, this is just telling Remedy to use the 
LDAP store to handle the authentication.  This would then handle the SSO 
functionality for both the web app and the client.  I could be wrong, but 
this is my assumption. If Doug could clarify this, it would be helpful in 
understanding the stated direction for Remedy.
 
Having said that, I just worked with a 
client who did a major comparison between the leading "SSO" vendors on the 
market.  All of them could be characterized as "password management with a 
nomenclature of sso" Some work better than others, but essentially they are 
all pitching the same thing.  
 
For a true "SSO" solution, you would have 
to a have central repository that all applications could reference for 
authentication information.  LDAP is the closest your going to get to that 
and not all applications support LDAP integration.  As a matter of fact, 
most applications handle authentication individually with their own login 
interfaces.  So the closest thing you have in the marketplace today for SSO 
is "password management" applications that will allow users to manage their 
credentials to all their required applications.  To the end user this still 
provides the "SSO" experience regardless of how it is handled on the 
backend.  
 
It's good to see this discussion 
taking place in the ARSList, as this seems to be the hot topic 
across most industries today.    I'm looking 
forward to ongoing discussions in this area.
 
Just my .02.
 
Scott
 


From: Action Request System discussion 
list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 
08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user 
tool

I was told by Doug.. that there would be Built in Functionality 
on theusertool to do this already.. no documentation on it.. but it 
isthere..now.. with that said.. I have a ticket in on this and have 
recieved nofeedback on the latest.. I am planning on following up on this 
nextweek.. I hope.I know I had issues with the original version of their 
plugin.. (remedy's)it worked with a userid and a password.. well we don't do 
that anymore.. so..But do not know the latest...I understood clearly 
that the same functionality that gives you sso onmid-tier is built into the 
client tool so that you can SSO exactly thesame way.. using there plug-in.. 
they (suppose to anyway) have asample with all the code and plug-in stuff 
into a windows based file..and once compiled it just works.. so..The 
other ones listed here.. I understood to be more of a passwordmanagment with 
a nomenclature of sso.. which they are not, to includethe one remedy 
sells.On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> 
wrote:> Scott - I would be interested in pricing and 
information.>> Thanks!>>>> 
-Original Message-> From: Action Request System discussion 
list(ARSList)> [mailto:arslist@ARSLIST.ORG] On Behalf Of Scott 
Hammons> Sent: August 3, 2006 1:54 PM> To: 
arslist@ARSLIST.ORG> Subject: Re: SSO via user tool>> 
Richard,>> As Garron mentioned there is a 3rd Party solution from 
a company called> Passlogix that provides this capability.  It is 
actually not to hard to> setup and configure for Remedy.   I've 
deployed the IBM branded version> against the Remedy Web Interface, the 
Remedy user tool, and the Remedy alert> tool.>> You can 
obtain the product from a number of vendors including Passlogix> 
directly, BMC (which is OEMing the Passlogix product), or IBM (which is> 
OEMing the same product).>> While this will resolve the immediate 
need for providing SSO functionality> to the Remedy User tool, it will 
also assist the company 

Re: SSO via user tool

2006-08-04 Thread Scott Hammons
Title: Re: SSO via user tool
**



I believe Doug may be referring to the built in integration to provide an SSO functionality against an LDAP store.  If this is the case, this is just telling Remedy to use the LDAP store to handle the authentication.  This would then handle the SSO functionality for both the web app and the client.  I could be wrong, but this is my assumption. If Doug could clarify this, it would be helpful in understanding the stated direction for Remedy.
 
Having said that, I just worked with a client who did a major comparison between the leading "SSO" vendors on the market.  All of them could be characterized as "password management with a nomenclature of sso" Some work better than others, but essentially they are all pitching the same thing.  
 
For a true "SSO" solution, you would have to a have central repository that all applications could reference for authentication information.  LDAP is the closest your going to get to that and not all applications support LDAP integration.  As a matter of fact, most applications handle authentication individually with their own login interfaces.  So the closest thing you have in the marketplace today for SSO is "password management" applications that will allow users to manage their credentials to all their required applications.  To the end user this still provides the "SSO" experience regardless of how it is handled on the backend.  
 
It's good to see this discussion taking place in the ARSList, as this seems to be the hot topic across most industries today.    I'm looking forward to ongoing discussions in this area.
 
Just my .02.
 
Scott
 
 
 


From: Action Request System discussion list(ARSList) on behalf of patrick zandiSent: Fri 8/4/2006 08:52To: arslist@ARSLIST.ORGSubject: Re: SSO via user tool

I was told by Doug.. that there would be Built in Functionality on theusertool to do this already.. no documentation on it.. but it isthere..now.. with that said.. I have a ticket in on this and have recieved nofeedback on the latest.. I am planning on following up on this nextweek.. I hope.I know I had issues with the original version of their plugin.. (remedy's)it worked with a userid and a password.. well we don't do that anymore.. so..But do not know the latest...I understood clearly that the same functionality that gives you sso onmid-tier is built into the client tool so that you can SSO exactly thesame way.. using there plug-in.. they (suppose to anyway) have asample with all the code and plug-in stuff into a windows based file..and once compiled it just works.. so..The other ones listed here.. I understood to be more of a passwordmanagment with a nomenclature of sso.. which they are not, to includethe one remedy sells.On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:> Scott - I would be interested in pricing and information.>> Thanks!>>>> -Original Message-> From: Action Request System discussion list(ARSList)> [mailto:arslist@ARSLIST.ORG] On Behalf Of Scott Hammons> Sent: August 3, 2006 1:54 PM> To: arslist@ARSLIST.ORG> Subject: Re: SSO via user tool>> Richard,>> As Garron mentioned there is a 3rd Party solution from a company called> Passlogix that provides this capability.  It is actually not to hard to> setup and configure for Remedy.   I've deployed the IBM branded version> against the Remedy Web Interface, the Remedy user tool, and the Remedy alert> tool.>> You can obtain the product from a number of vendors including Passlogix> directly, BMC (which is OEMing the Passlogix product), or IBM (which is> OEMing the same product).>> While this will resolve the immediate need for providing SSO functionality> to the Remedy User tool, it will also assist the company as a whole by> giving them the capability to provide SSO to most web-based, windows based,> and host based applications beyond Remedy.>> Let me know if you want information on pricing because we can resell both> the Passlogix and IBM versions.>> HTH,>> Scott>> >> From: Action Request System discussion list(ARSList) on behalf of Richard> Baird> Sent: Thu 8/3/2006 11:52> To: arslist@ARSLIST.ORG> Subject: SSO via user tool>>>> Hi Folks..>> Does anyone have an SSO solution for the user tool. I've used the ldap plug-> in(s) a bit, but what the user's want is to log in to their domain account> on the PC and then not have to log in to remedy. My understanding is that> using AREA they will still have to log in but the auth is against the> directory rather than the user form.>> After talking to some folks and browsing the ARSList archives, there seem to> be ways to do this when users are connecting via mid-tier (but not pretty> ways...;),

Re: SSO via user tool

2006-08-04 Thread Grooms, Frederick W
Please keep us updated.  

Do you have that Windows sample?

Fred 

-Original Message-
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of patrick zandi
Sent: Friday, August 04, 2006 8:52 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool

I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin..
(remedy's) it worked with a userid and a password.. well we don't do
that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a sample
with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:
> Scott - I would be interested in pricing and information.
>
> Thanks!
>
>
>
> -Original Message-
> From: Action Request System discussion list(ARSList) 
> [mailto:[EMAIL PROTECTED] On Behalf Of Scott Hammons
> Sent: August 3, 2006 1:54 PM
> To: arslist@ARSLIST.ORG
> Subject: Re: SSO via user tool
>
> Richard,
>
> As Garron mentioned there is a 3rd Party solution from a company 
> called Passlogix that provides this capability.  It is actually not to
hard to
> setup and configure for Remedy.   I've deployed the IBM branded
version
> against the Remedy Web Interface, the Remedy user tool, and the Remedy

> alert tool.
>
> You can obtain the product from a number of vendors including 
> Passlogix directly, BMC (which is OEMing the Passlogix product), or 
> IBM (which is OEMing the same product).
>
> While this will resolve the immediate need for providing SSO 
> functionality to the Remedy User tool, it will also assist the company

> as a whole by giving them the capability to provide SSO to most 
> web-based, windows based, and host based applications beyond Remedy.
>
> Let me know if you want information on pricing because we can resell 
> both the Passlogix and IBM versions.
>
> HTH,
>
> Scott
>
> 
>
> From: Action Request System discussion list(ARSList) on behalf of 
> Richard Baird
> Sent: Thu 8/3/2006 11:52
> To: arslist@ARSLIST.ORG
> Subject: SSO via user tool
>
>
>
> Hi Folks..
>
> Does anyone have an SSO solution for the user tool. I've used the ldap

> plug-
> in(s) a bit, but what the user's want is to log in to their domain 
> account on the PC and then not have to log in to remedy. My 
> understanding is that using AREA they will still have to log in but 
> the auth is against the directory rather than the user form.
>
> After talking to some folks and browsing the ARSList archives, there 
> seem to be ways to do this when users are connecting via mid-tier (but

> not pretty ways...;), but what about usertool?
>
> Thanks in advance for any comments/suggestions
>
> Cheers,
>
> Richard
>
> __
> __
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org 
> <http://www.wwrug.org/>
>
>
>
> __
> __
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>
> __
> _ UNSUBSCRIBE or access ARSlist Archives at 
> http://www.wwrug.org
>


--
Patrick Zandi


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-04 Thread patrick zandi

I miss my spell checker.. I bet you do too.

On 8/4/06, patrick zandi <[EMAIL PROTECTED]> wrote:

I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:
> Scott - I would be interested in pricing and information.
>
> Thanks!
>
>
>
> -Original Message-
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of Scott Hammons
> Sent: August 3, 2006 1:54 PM
> To: arslist@ARSLIST.ORG
> Subject: Re: SSO via user tool
>
> Richard,
>
> As Garron mentioned there is a 3rd Party solution from a company called
> Passlogix that provides this capability.  It is actually not to hard to
> setup and configure for Remedy.   I've deployed the IBM branded version
> against the Remedy Web Interface, the Remedy user tool, and the Remedy alert
> tool.
>
> You can obtain the product from a number of vendors including Passlogix
> directly, BMC (which is OEMing the Passlogix product), or IBM (which is
> OEMing the same product).
>
> While this will resolve the immediate need for providing SSO functionality
> to the Remedy User tool, it will also assist the company as a whole by
> giving them the capability to provide SSO to most web-based, windows based,
> and host based applications beyond Remedy.
>
> Let me know if you want information on pricing because we can resell both
> the Passlogix and IBM versions.
>
> HTH,
>
> Scott
>
> 
>
> From: Action Request System discussion list(ARSList) on behalf of Richard
> Baird
> Sent: Thu 8/3/2006 11:52
> To: arslist@ARSLIST.ORG
> Subject: SSO via user tool
>
>
>
> Hi Folks..
>
> Does anyone have an SSO solution for the user tool. I've used the ldap plug-
> in(s) a bit, but what the user's want is to log in to their domain account
> on the PC and then not have to log in to remedy. My understanding is that
> using AREA they will still have to log in but the auth is against the
> directory rather than the user form.
>
> After talking to some folks and browsing the ARSList archives, there seem to
> be ways to do this when users are connecting via mid-tier (but not pretty
> ways...;), but what about usertool?
>
> Thanks in advance for any comments/suggestions
>
> Cheers,
>
> Richard
>
> 
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
> <http://www.wwrug.org/>
>
>
>
> 
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>
> 
___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>


--
Patrick Zandi




--
Patrick Zandi

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-04 Thread patrick zandi

I was told by Doug.. that there would be Built in Functionality on the
usertool to do this already.. no documentation on it.. but it is
there..
now.. with that said.. I have a ticket in on this and have recieved no
feedback on the latest.. I am planning on following up on this next
week.. I hope.
I know I had issues with the original version of their plugin.. (remedy's)
it worked with a userid and a password.. well we don't do that anymore.. so..
But do not know the latest...

I understood clearly that the same functionality that gives you sso on
mid-tier is built into the client tool so that you can SSO exactly the
same way.. using there plug-in.. they (suppose to anyway) have a
sample with all the code and plug-in stuff into a windows based file..
and once compiled it just works.. so..

The other ones listed here.. I understood to be more of a password
managment with a nomenclature of sso.. which they are not, to include
the one remedy sells.


On 8/4/06, Tyrone Dee <[EMAIL PROTECTED]> wrote:

Scott - I would be interested in pricing and information.

Thanks!



-Original Message-
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Hammons
Sent: August 3, 2006 1:54 PM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool

Richard,

As Garron mentioned there is a 3rd Party solution from a company called
Passlogix that provides this capability.  It is actually not to hard to
setup and configure for Remedy.   I've deployed the IBM branded version
against the Remedy Web Interface, the Remedy user tool, and the Remedy alert
tool.

You can obtain the product from a number of vendors including Passlogix
directly, BMC (which is OEMing the Passlogix product), or IBM (which is
OEMing the same product).

While this will resolve the immediate need for providing SSO functionality
to the Remedy User tool, it will also assist the company as a whole by
giving them the capability to provide SSO to most web-based, windows based,
and host based applications beyond Remedy.

Let me know if you want information on pricing because we can resell both
the Passlogix and IBM versions.

HTH,

Scott



From: Action Request System discussion list(ARSList) on behalf of Richard
Baird
Sent: Thu 8/3/2006 11:52
To: arslist@ARSLIST.ORG
Subject: SSO via user tool



Hi Folks..

Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account
on the PC and then not have to log in to remedy. My understanding is that
using AREA they will still have to log in but the auth is against the
directory rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem to
be ways to do this when users are connecting via mid-tier (but not pretty
ways...;), but what about usertool?

Thanks in advance for any comments/suggestions

Cheers,

Richard


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
<http://www.wwrug.org/>




___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org




--
Patrick Zandi

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-04 Thread Tyrone Dee
Scott - I would be interested in pricing and information.

Thanks!



-Original Message-
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Hammons
Sent: August 3, 2006 1:54 PM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool

Richard,
 
As Garron mentioned there is a 3rd Party solution from a company called
Passlogix that provides this capability.  It is actually not to hard to
setup and configure for Remedy.   I've deployed the IBM branded version
against the Remedy Web Interface, the Remedy user tool, and the Remedy alert
tool.  
 
You can obtain the product from a number of vendors including Passlogix
directly, BMC (which is OEMing the Passlogix product), or IBM (which is
OEMing the same product).  
 
While this will resolve the immediate need for providing SSO functionality
to the Remedy User tool, it will also assist the company as a whole by
giving them the capability to provide SSO to most web-based, windows based,
and host based applications beyond Remedy.  
 
Let me know if you want information on pricing because we can resell both
the Passlogix and IBM versions.
 
HTH,
 
Scott



From: Action Request System discussion list(ARSList) on behalf of Richard
Baird
Sent: Thu 8/3/2006 11:52
To: arslist@ARSLIST.ORG
Subject: SSO via user tool



Hi Folks..

Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account
on the PC and then not have to log in to remedy. My understanding is that
using AREA they will still have to log in but the auth is against the
directory rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem to
be ways to do this when users are connecting via mid-tier (but not pretty
ways...;), but what about usertool?

Thanks in advance for any comments/suggestions

Cheers,

Richard


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
<http://www.wwrug.org/> 




___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-03 Thread McKenzie, James J C-E LCMC HQISEC/L3
Title: RE: SSO via user tool
**





Scott:


Thank you.


James McKenzie 


-Original Message-
From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Scott Hammons
Sent: Thursday, August 03, 2006 11:16 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


James,
 
Yes it does, they can handle multi-factor authentication as well.
 
Scott





From: Action Request System discussion list(ARSList) on behalf of McKenzie, James J C-E LCMC HQISEC/L3
Sent: Thu 8/3/2006 12:58
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool



** 


Scott: 


Does this allow SSO through biometric authentication? 


James McKenzie
L-3 GSI 


-Original Message-
From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Scott Hammons
Sent: Thursday, August 03, 2006 10:54 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool 


Richard, 
  
As Garron mentioned there is a 3rd Party solution from a company called Passlogix that provides this capability.  It is actually not to hard to setup and configure for Remedy.   I've deployed the IBM branded version against the Remedy Web Interface, the Remedy user tool, and the Remedy alert tool.  


You can obtain the product from a number of vendors including Passlogix directly, BMC (which is OEMing the Passlogix product), or IBM (which is OEMing the same product).  


While this will resolve the immediate need for providing SSO functionality to the Remedy User tool, it will also assist the company as a whole by giving them the capability to provide SSO to most web-based, windows based, and host based applications beyond Remedy.  


Let me know if you want information on pricing because we can resell both the Passlogix and IBM versions. 
  
HTH, 
  
Scott 


 


From: Action Request System discussion list(ARSList) on behalf of Richard Baird
Sent: Thu 8/3/2006 11:52
To: arslist@ARSLIST.ORG
Subject: SSO via user tool 




Hi Folks.. 


Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account on the PC and then not have to log in to remedy. My understanding is that using AREA they will still have to log in but the auth is against the directory rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem to be ways to do this when users are connecting via mid-tier (but not pretty ways...;), but what about usertool?

Thanks in advance for any comments/suggestions 


Cheers, 


Richard 


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org <http://www.wwrug.org/>  <http://www.wwrug.org/> 




___ 
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org <http://www.wwrug.org/>  


__20060125___This posting was submitted with HTML in it___


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org




__20060125___This posting was submitted with HTML in it___

Re: SSO via user tool

2006-08-03 Thread Scott Hammons
James,
 
Yes it does, they can handle multi-factor authentication as well.
 
Scott



From: Action Request System discussion list(ARSList) on behalf of McKenzie, 
James J C-E LCMC HQISEC/L3
Sent: Thu 8/3/2006 12:58
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


** 

Scott: 

Does this allow SSO through biometric authentication? 

James McKenzie 
L-3 GSI 

-Original Message- 
From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Scott Hammons 
Sent: Thursday, August 03, 2006 10:54 AM 
To: arslist@ARSLIST.ORG 
Subject: Re: SSO via user tool 

Richard, 
  
As Garron mentioned there is a 3rd Party solution from a company called 
Passlogix that provides this capability.  It is actually not to hard to setup 
and configure for Remedy.   I've deployed the IBM branded version against the 
Remedy Web Interface, the Remedy user tool, and the Remedy alert tool.  


You can obtain the product from a number of vendors including Passlogix 
directly, BMC (which is OEMing the Passlogix product), or IBM (which is OEMing 
the same product).  


While this will resolve the immediate need for providing SSO functionality to 
the Remedy User tool, it will also assist the company as a whole by giving them 
the capability to provide SSO to most web-based, windows based, and host based 
applications beyond Remedy.  


Let me know if you want information on pricing because we can resell both the 
Passlogix and IBM versions. 
  
HTH, 
  
Scott 

 

From: Action Request System discussion list(ARSList) on behalf of Richard Baird 
Sent: Thu 8/3/2006 11:52 
To: arslist@ARSLIST.ORG 
Subject: SSO via user tool 



Hi Folks.. 

Does anyone have an SSO solution for the user tool. I've used the ldap plug- 
in(s) a bit, but what the user's want is to log in to their domain account on 
the PC and then not have to log in to remedy. My understanding is that using 
AREA they will still have to log in but the auth is against the directory 
rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem to be 
ways to do this when users are connecting via mid-tier (but not pretty 
ways...;), but what about usertool?

Thanks in advance for any comments/suggestions 

Cheers, 

Richard 

___ 
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org 
<http://www.wwrug.org/>  <http://www.wwrug.org/> 



___ 
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org 
<http://www.wwrug.org/>  

__20060125___This posting was submitted with HTML in it___

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-03 Thread McKenzie, James J C-E LCMC HQISEC/L3
Title: RE: SSO via user tool
**





Scott:


Does this allow SSO through biometric authentication?


James McKenzie
L-3 GSI 


-Original Message-
From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Scott Hammons
Sent: Thursday, August 03, 2006 10:54 AM
To: arslist@ARSLIST.ORG
Subject: Re: SSO via user tool


Richard,
 
As Garron mentioned there is a 3rd Party solution from a company called Passlogix that provides this capability.  It is actually not to hard to setup and configure for Remedy.   I've deployed the IBM branded version against the Remedy Web Interface, the Remedy user tool, and the Remedy alert tool.  

 
You can obtain the product from a number of vendors including Passlogix directly, BMC (which is OEMing the Passlogix product), or IBM (which is OEMing the same product).  

 
While this will resolve the immediate need for providing SSO functionality to the Remedy User tool, it will also assist the company as a whole by giving them the capability to provide SSO to most web-based, windows based, and host based applications beyond Remedy.  

 
Let me know if you want information on pricing because we can resell both the Passlogix and IBM versions.
 
HTH,
 
Scott





From: Action Request System discussion list(ARSList) on behalf of Richard Baird
Sent: Thu 8/3/2006 11:52
To: arslist@ARSLIST.ORG
Subject: SSO via user tool




Hi Folks..


Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account on the PC and then not have to log in to remedy. My understanding is that using AREA they will still have to log in but the auth is against the directory rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem to be ways to do this when users are connecting via mid-tier (but not pretty ways...;), but what about usertool?

Thanks in advance for any comments/suggestions


Cheers,


Richard


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org <http://www.wwrug.org/> 




___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org




__20060125___This posting was submitted with HTML in it___

Re: SSO via user tool

2006-08-03 Thread Scott Hammons
Richard,
 
As Garron mentioned there is a 3rd Party solution from a company called 
Passlogix that provides this capability.  It is actually not to hard to setup 
and configure for Remedy.   I've deployed the IBM branded version against the 
Remedy Web Interface, the Remedy user tool, and the Remedy alert tool.  
 
You can obtain the product from a number of vendors including Passlogix 
directly, BMC (which is OEMing the Passlogix product), or IBM (which is OEMing 
the same product).  
 
While this will resolve the immediate need for providing SSO functionality to 
the Remedy User tool, it will also assist the company as a whole by giving them 
the capability to provide SSO to most web-based, windows based, and host based 
applications beyond Remedy.  
 
Let me know if you want information on pricing because we can resell both the 
Passlogix and IBM versions.
 
HTH,
 
Scott



From: Action Request System discussion list(ARSList) on behalf of Richard Baird
Sent: Thu 8/3/2006 11:52
To: arslist@ARSLIST.ORG
Subject: SSO via user tool



Hi Folks..

Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account
on the PC and then not have to log in to remedy. My understanding is that
using AREA they will still have to log in but the auth is against the
directory rather than the user form.

After talking to some folks and browsing the ARSList archives, there seem
to be ways to do this when users are connecting via mid-tier (but not
pretty ways...;), but what about usertool?

Thanks in advance for any comments/suggestions

Cheers,

Richard

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org 
<http://www.wwrug.org/> 



___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


Re: SSO via user tool

2006-08-03 Thread Christie, Garron
Talk to your BMC sales rep and ask them for a demo version of v-GO SSO.
That may be what you are looking for to solve your problem. The only
thing is that it isn't free.

HTH, 
Garron Christie

-Original Message-
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Baird
Sent: Thursday, August 03, 2006 10:52 AM
To: arslist@ARSLIST.ORG
Subject: SSO via user tool

Hi Folks..

Does anyone have an SSO solution for the user tool. I've used the ldap
plug-
in(s) a bit, but what the user's want is to log in to their domain
account on the PC and then not have to log in to remedy. My
understanding is that using AREA they will still have to log in but the
auth is against the directory rather than the user form. 

After talking to some folks and browsing the ARSList archives, there
seem to be ways to do this when users are connecting via mid-tier (but
not pretty ways...;), but what about usertool?

Thanks in advance for any comments/suggestions

Cheers,

Richard


___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org


SSO via user tool

2006-08-03 Thread Richard Baird
Hi Folks..

Does anyone have an SSO solution for the user tool. I've used the ldap plug-
in(s) a bit, but what the user's want is to log in to their domain account 
on the PC and then not have to log in to remedy. My understanding is that 
using AREA they will still have to log in but the auth is against the 
directory rather than the user form. 

After talking to some folks and browsing the ARSList archives, there seem 
to be ways to do this when users are connecting via mid-tier (but not 
pretty ways...;), but what about usertool?

Thanks in advance for any comments/suggestions

Cheers,

Richard

___
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org