SSO Multiple AssertionConsumerService Locations in one system
search cancel

SSO Multiple AssertionConsumerService Locations in one system

book

Article ID: 241913

calendar_today

Updated On:

Products

CA Automic Workload Automation - Automation Engine CA Automic One Automation

Issue/Introduction

With SSO with SAML or Kerberos enabled, is there the possibility to have more than one IDPs in one Automic system?  Is there a way to point to multiple locations in the AssertionConsumerService?

The setup:

There is a load balancer on https://loadbalancer.fqdn:8443/awi
The load balancer points to two different AWI servers, https://awiserver1.fqdn:8443/awi and https://awiserver2.fqdn:8443/awi
The AssertionConsumerService element in the *SP keyword in UC_SAML_SETTINGS points to https://loadbalancer.fqdn:8443/awi

There are times during things like the ZDU where both servers are available, but one should not be used and SAML should still be used to login.  Is there a way to point the AssertionConsumerService to multiple Locations?  So could it point to https://loadbalancer.fqdn:8443/awi and https://awiserver1.fqdn:8443/awi?

Environment

Release : 12.3.7

Component : AUTOMATION ENGINE

Resolution

Currently there is no way to have multiple URLs for SSO in Automic, only one can be used.