How to configure SSO for another server in the DMZ
book
Article ID: 111888
calendar_today
Updated On:
Products
CA Service Management - Asset Portfolio ManagementCA Service Management - Service Desk Manager
Issue/Introduction
Service Catalog is configured with single sign on regarding the main server. Now we plan to install a secondary in the DMZ for our customers. Is it possible to configure only this additional server without single sign on?
Service Catalog is configured with single sign on regarding the main server. Now we plan to install a secondary in the DMZ for our customers. Is it possible to configure only this additional server without single sign on?
Environment
Windows
Resolution
When SSO is enabled (or not), it is registered as such in the mdb database. It can be verified by executing this SQL query: select * from usm_configuration where group_name like '%sso%'
And then check for the value of the name-column where name='enablesso'. The value field was as 2, mean ing SSO is ON. (0 means OFF).
As shown, the 'SSO ON/OFF' setting is stored in the mdb. And there is only one mdb being used for all CA Service Catalog(SC) installations. Which means that ALL or NONE will make use of the SSO feature.
Unless you have a completely/fully separated new SC installation. With separate mdb and EEM, then it would be possible to get you a non-SSO Catalog server.