David,
Can you send me a link or e-mail off line the docs for Atrium SSO? 

Tauf Chowdhury | Forest Laboratories, Inc.
Analyst, Service Management
Mobile:646.483.2779
 

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:[email protected]] On Behalf Of Easter, David
Sent: Thursday, December 16, 2010 2:53 PM
To: [email protected]
Subject: Re: BMC Atrium-SSO appears to be somewhat of a tease.

> BMC's documentation states the product is not fully supported 

To clarify, Atrium SSO is fully supported.  If you look at the entire sentence 
in context, it reads:

"BMC Atrium SSO is certified on the configurations explicitly stated in this 
document. Configurations not listed might still operate properly and so 
customers can choose to run in a configuration not listed as supported. Such 
configurations would be considered "unconfirmed". BMC will accept issues 
reported in unconfirmed configurations but we reserve the right to request 
customer assistance in problem determination, including recreating the problem 
on a supported configuration.

Reported defects either found to be unique to an unconfirmed configuration or 
not reproducible within a supported environment will be addressed at the 
discretion of BMC. Defects requiring time and resources beyond commercially 
reasonable effort might not be addressed."


This is the same kind of statement found in the AR System compatibility matrix, 
by the way.  It's simply stating that if you find a defect on an unsupported 
configuration, BMC might not address it since it's unsupported.


-David J. Easter
Sr. Product Manager, Enterprise Service Management
BMC Software, Inc.
 
The opinions, statements, and/or suggested courses of action expressed in this 
E-mail do not necessarily reflect those of BMC Software, Inc.  My voluntary 
participation in this forum is not intended to convey a role as a spokesperson, 
liaison or public relations representative for BMC Software, Inc.

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:[email protected]] On Behalf Of John Baker
Sent: Thursday, December 16, 2010 1:48 AM
To: [email protected]
Subject: BMC Atrium-SSO appears to be somewhat of a tease.

Hello,

AtriumSSO is indeed a bit of a tease.  It's an open source product
called OpenSSO that was killed off by Oracle after they purchased Sun.

The first tease is the idea that AtriumSSO provides SSO.  AtriumSSO
doesn't provide an Active Directory SSO implementation which is what 90%
of AR System users want from an SSO product.  This means you can't open
IE, navigate to Midtier and sign in without being prompted for
credentials.  To be fair, there is "half" of an AD implementation in
OpenSSO.

BMC's documentation states the product is not fully supported.  On page
12 of their documentation it states, "Defects requiring time and
resources beyond commercially reasonable effort might not be
addressed.".  This is an entirely acceptable position given OpenSSO is
about 650Mb of code and libraries, and the BMC additions account for <5%
of the code, so they can be forgiven for not having reviewed/tested the
other 95%.

You can purchase support from a company called ForgeRock, created after
Oracle killed off OpenSSO.  I've spoken to them and believe they can
help with some of the 95%, but won't be able to help with AR System
configuration and deployment.

AtriumSSO is installed as a separate Tomcat instance, introducing more
administrative requirements. 

AtriumSSO has no "wizard" to integrate with your corporate
infrastructure, which means you'll require BMC consulting days to
perform the task.  I assume customers are required to pay for BMC
professional services.

AtriumSSO is not recommended for external SSO use.  On page 20 of their
documentation it states, "Installation of BMC Atrium SSO on an external
Tomcat server is not recommended due to security and load issues".

AtriumSSO has no support for the Windows User Tool, which is entirely
acceptable given the WUT is being dropped (but we know that many AR
System administrators love it!).

OpenSSO was designed as a corporate SSO solution to take on the likes of
Novell Access Manager, Cleartrust and Siteminder.  It was never designed
to slip neatly into the Midtier to solve the SSO problem.

I don't believe there's support for an IIS front end either.  I searched
for IIS in the Atrium SSO documentation and couldn't find a match.


John
-- 
Single Sign On for the AR System
http://www.javasystemsolutions.com/jss/ssoplugin

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

**********************************************************************
This e-mail and its attachments may contain Forest Laboratories, Inc. 
proprietary information that is privileged, confidential or subject to 
copyright belonging to Forest Laboratories, Inc. This e-mail is intended solely 
for the use of the individual or entity to which it is addressed. If you are 
not the intended recipient of this e-mail, or the employee or agent responsible 
for delivering this e-mail to the intended recipient, you are hereby notified 
that any dissemination, distribution, copying or action taken in relation to 
the contents of and attachments to this e-mail is strictly prohibited and may 
be unlawful. If you have received this e-mail in error, please notify the 
sender immediately and permanently delete the original and any copy of this 
e-mail and any printout.

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

Reply via email to