SSO integration, XOG and Scheduler considerations for Clarity

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

XOG and Schedule Connect (used for both Microsoft Project (MSP) and Open Workbench (OWB) integrations) were not originally designed to work with SSO-enabled Clarity applications. Special considerations must be taken for these applications to successfully interact with Clarity when Single Sign-on is enabled in Clarity. 

Resolution

In Clarity the separate non-SSO instance are not required, but the Scheduler Entry URL in the NSA must be set so that the schedulers bypass the SSO web agent when they make requests. XOG and ScheduleConnect will not present the SSO token with their requests, so all attempts for XOG/ScheduleConnect to interact with Clarity through the SSO-enabled web server will fail. All XOG activity should use the Scheduler Entry URL so that the XOG authentication succeeds.

The correct configuration is to set the Scheduler Entry URL to the direct port that the application server instance is running on so that the request from XOG/ScheduleConnect is not intercepted by the SSO web agent. In a clustered environment, the Scheduler Entry URL can be set to a load balancer pool that contains the direct application server instance ports so that the requests bypass the SSO web agent.

Clustered environment:

Clarity Web URL (Load balanced web URL into the SSO-enabled webserver ports)

• http://myclaritycluster.example.com:80

Clarity Webserver URLs (SSO-enabled with web agent)

• http://myclaritywebserver01.example.com:8000
• http://myclaritywebserver02.example.com:8000
• http://myclaritywebserver03.example.com:8000

Clarity Scheduler URL (Load balanced URL directly to the application instance ports)

• http://myclarityschedulers.example.com:80

Clarity Application instance URLs:

• http://myclarityappserver01.example.com:9080
• http://myclarityappserver02.example.com:9080
• http://myclarityappserver03.example.com:9080

NSA Application Settings:

• HTTP Entry URL: http://myclaritycluster.example.com/
• Scheduler Entry URL: http://myclarityschedulers.example.com/

Single server environment:

Clarity Web URL:

• http://myclarityserver.example.com/

Clarity Application instance URL:

• http://myclarityserver.example.com:9080/

NSA/CSA Application Settings:

• HTTP Entry URL: http://myclarityserver.example.com/
• Scheduler Entry URL: http://myclarityserver.example.com:9080/