Connecting IM Workpoint Designer to vApp via EJB

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

How to connect CA IM (Identity Manager) Workpoint using EJB

Environment

Release : 14.2\ 14.3

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Cause

Configuration settings.

Resolution

In order to configure CA IM (Identity Manager) Workpoint Designer for the vApp to use  EJB connections please follow the steps below:

Edit the "init.bat" file in the <CA-IM-WORKPOINT>\bin folder

For example:
C:\Program Files\Virtual Appliance Tools\CA-IM_WorkpointDesigner\bin

Locate the JBoss section of the init.bat that matches your version of JBoss--EAP 6.1 or  Wildfly 8.2. 

Uncomment the lines beginning with 

SET EJB_CLASSPATH and SET JAVADPARMS.

Be sure that all sections for other application servers are commented.

Copy the following four JAR files from the vApp to <CA-IM-WORKPOINT>\lib

From (vApp):

/opt/CA/wildfly-idm/bin/client/jboss-client.jar

/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/as/naming/main/jboss-as-naming-<version>.jar  or wildfly-naming-<version>.jar 

/opt/CA/wildfly-idm/modules/system/layers/base/org/jboss/msc/main/jboss-msc-<version>.jar

/opt/CA/wildfly-idm/jboss-modules.jar   

To <CA-IM-WORKPOINT>

For example:

C:\Program Files\Virtual Appliance Tools\CA-IM_WorkpointDesigner\lib

To connect with EJB you will also need to make sure to have a JBoss\Wildfly application user in place:

Logon to the vApp as Config
execute the following command

sudo /opt/CA/wildfly-idm/bin/add-user.sh

You will be prompted for 

What type of user do you wish to add?

a) Management User (mgmt-users.properties)
b) Application User (application-users.properties)
(a): b

Enter the details of the new user to add.
Realm (ApplicationRealm) :
Username : imuser
Password : <password>

Note the name and password of the user you created.

When prompted for application group, press enter to accept the default null value []

When asked "Is this new user going to be used for one AS process to connect to another AS process?" Select No as the user information will be inserted in the Domain configuration instead of the standalone configuration. 

Once you have created your user, open your workpoint-client.properties file (it is under \C:\Program Files\Virtual Appliance Tools\CA-IM_WorkpointDesigner\conf):

Make sure that "client.connect" is set to EJB

For example
client.connect = EJB

Set the following parameters

java.naming.provider.url=http://<RemoteIP>:8080
java.naming.factory.initial=org.jboss.as.naming.InitialContextFactory
java.naming.factory.url.pkgs=org.jboss.ejb.client.naming
remote.connectionprovider.create.options.org.xnio.Options.SSL_ENABLED=false
remote.connections=default
remote.connection.default.host=<RemoteIP>
remote.connection.default.port=8080
remote.connection.default.connect.options.org.xnio.Options.SASL_POLICY_NOANONYMOUS=false
remote.connection.default.username=<username>
remote.connection.default.password=<password1>
client.ejbLookupPrefix=ejb:iam_im/iam_im_wpServer/
client.ejbLookupSuffix=!<CLASSNAME>


You will need to add the lines and set <username> and <password> as per the user created via add-user earlier in this document.

remote.connection.default.username=imuser
remote.connection.default.password=Password1!

After you have made these changes to the workpoint-clinet.proiperties you will need to Restart_IM to initiate the connection settings before starting CA_IM_Workpoint Designer. 

Additional Information

An alternative (easier) approach can be used to connect CA-IM_Workpoint Designer via XML and this documented in the following Knowledge Article

https://knowledge.broadcom.com/external/article?articleId=138328