Hi Brad, Please see KA420853 on BMC Support site knowledge base. I thought I had to use it, but somehow despite my session showing [email protected] it still works and passed my credentials successfully.
Jon On Wed, Feb 11, 2015 at 10:34 PM, BradRemedy <[email protected]> wrote: > ** > > Hi Everyone > > > > I need some help please. I am busy setting up atrium SSO in my environment > and cannot seem to get the final steps working. The atrium SSO installation > went through with no errors and I have successfully added a user store to > our remedy application server (Version 8). I know this is working because > in the Users and Groups sections I can see my remedy usernames and groups > being pulled through. > > > > I have also setup Kerberos Authentication with a Flag of Sufficient and > the Profile as Dynamic. However when I test the SSO solution and I have a > direct URL to the SRM console, it opens the page however it doesn't > authenticate me. The "Welcome" message on the top right corner of SRM is > empty whereas it would usually say "Welcome Joe Soap". It also complains > about permissions which confirms my thoughts. > > > > I currently only have one web server (Also version 8) integrated to the > Atrium SSO which I did by following the instructions in the installation > guide and running the "SSOMidtierIntegation" application - also which > installed with no errors. > > > > Once thing I did notice is that if I look in Atrium SSO under the > "Sessions" section, I can see my username in there however it is in the > format of 'userid@domain'. > > So it is *[email protected] <[email protected]>*' which doesn't match my remedy > usernames which is just '*joes*'. > > Basically I need to strip out the domain information from the userid in > Atrium SSO and I have looked at all config settings and cannot find > anything anywhere. > > > > I did see under the Kerberos settings that there is a option for "*Use > Domain name with Principal*" however that is not enabled at all. > > > > Does anyone know how Atrium SSO gets the user information from the web > server and how I can change the format of that information before it > reaches the SSO server ? > > > > Thanks in advance > Brad > _ARSlist: "Where the Answers Are" and have been for 20 years_ _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"
