Hello, AtriumSSO is indeed a bit of a tease. It's an open source product called OpenSSO that was killed off by Oracle after they purchased Sun.
The first tease is the idea that AtriumSSO provides SSO. AtriumSSO doesn't provide an Active Directory SSO implementation which is what 90% of AR System users want from an SSO product. This means you can't open IE, navigate to Midtier and sign in without being prompted for credentials. To be fair, there is "half" of an AD implementation in OpenSSO. BMC's documentation states the product is not fully supported. On page 12 of their documentation it states, "Defects requiring time and resources beyond commercially reasonable effort might not be addressed.". This is an entirely acceptable position given OpenSSO is about 650Mb of code and libraries, and the BMC additions account for <5% of the code, so they can be forgiven for not having reviewed/tested the other 95%. You can purchase support from a company called ForgeRock, created after Oracle killed off OpenSSO. I've spoken to them and believe they can help with some of the 95%, but won't be able to help with AR System configuration and deployment. AtriumSSO is installed as a separate Tomcat instance, introducing more administrative requirements. AtriumSSO has no "wizard" to integrate with your corporate infrastructure, which means you'll require BMC consulting days to perform the task. I assume customers are required to pay for BMC professional services. AtriumSSO is not recommended for external SSO use. On page 20 of their documentation it states, "Installation of BMC Atrium SSO on an external Tomcat server is not recommended due to security and load issues". AtriumSSO has no support for the Windows User Tool, which is entirely acceptable given the WUT is being dropped (but we know that many AR System administrators love it!). OpenSSO was designed as a corporate SSO solution to take on the likes of Novell Access Manager, Cleartrust and Siteminder. It was never designed to slip neatly into the Midtier to solve the SSO problem. I don't believe there's support for an IIS front end either. I searched for IIS in the Atrium SSO documentation and couldn't find a match. John -- Single Sign On for the AR System http://www.javasystemsolutions.com/jss/ssoplugin _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
