Access Manager SSO to Remedy ARS

Access Manager SSO to Remedy ARS

Remedy ARS can be a powerful tool for managing parts of the ITIL framework. A powerful tool also requires powerful access controls. NetIQ Access Manager can easily be configured to control access to Remedy while still making it less cumbersome for end users.

The Remedy login form has a few "gotchas" with the way it operates. Before the form is sent to the webserver, the user's password is scrambled with a JavaScript function. Below is how to configure the Access Manager Form Fill policy to process the form correctly.

First is a Form Login Failure section:

RemedyARS_FormLoginFailure.png

Notice the Page Matching Criteria which is ARERR. Obviously, how you respond to failed login is up to your business, but this failure just simply leaves the user on the login page.

Next is the actual Form Fill:

RemedyARS_FormFill.png

The JavaScript Functions to Keep are as follows:

  • function getScrambledPassword()
  • function doLogin()
  • function doSubmit()
  • function getTimezone()

The JavaScript Statements to Execute on Submit is simply doLogin(). This is the important bit as it does the scrambling of the password.

Obviously you don't want the Form Fill engine processing all arsys pages for the form "loginForm", so set up a Protected Resource for just the URI /arsys/shared/login.jsp and assign your Form Fill policy (along with your Authentication Procedure and Authorization).

Commit and test.

Labels (2)
Tags (2)

DISCLAIMER:

Some content on Community Tips & Information pages is not officially supported by Micro Focus. Please refer to our Terms of Use for more detail.
Top Contributors
Version history
Revision #:
4 of 4
Last update:
‎2020-01-31 11:25
Updated by:
 
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.