There is also the integration white paper as a reference: 16-Oct-2006 (White Paper) Integrating BMC Remedy Action Request System with Single Sign-On (SSO) and Other Client-Side Login Intercept Technologies PDF <http://www.bmc.com/supportu/documents/57/12/65712/65712.pdf> http://www.bmc.com/supportu/documents/57/12/65712/65712.pdf -David J. Easter Sr. Product Manager, Service Management Business Unit BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. ________________________________
From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Garrison, Sean (Norcross) Sent: Thursday, January 24, 2008 9:36 AM To: [email protected] Subject: Re: FW: ARS posting ** The only integration w/ SSO that exists that I am aware of is the one that Remedy has w/ Oracle SSO. There is an example SSO code that someone gave me to try that I have seen before (via AREA API). If you call around Remedy you might be able to find it. The code that was sent to us was insecure ... so use at your own risk. It also would not meet our requirements. We wanted gui users to authenticate via LDAP and mid-tier users to automatically log in. Which means we would have had to write our own LDAP plugin that included a back door for Mid-Tier. If someone knew the back door they could log in as anybody and have access to anything in Remedy. Sean From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Roger Walls Sent: Thursday, January 24, 2008 11:54 AM To: [email protected] Subject: FW: ARS posting ** Hello all, My company is looking to implement an automatic login solution (SSO using windows authentication) with the web interface for Remedy ARS. Since many people have interpreted this differently, please allow me to explain what I mean: We'd like our users to NOT be prompted with the remedy login screen. If a site is listed in the "intranet zone" in the browser settings, you can pass your current username and password from the machine to the site and be authenticated without being prompted for login credentials. We'd like the remedy site to be able to read the HTTP Request headers for this information and allow the authentication to pass through. We do not have any third-party SSO solution. Is this possible out of the box? If not, is there an add-on available that would allow us do this? Has anyone done this before (successfully)? Thanks in advance. Roger Walls __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" html___ __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" html___ _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

