ahidalgo1 Absent Member.
Absent Member.
902 views

Testing SSPR questions


1) If I want to use SSPR for passwords self-service (Universal PW) and
people search do I do the standalone install or IDM integrated install?

2) How do I do a clean uninstall?

3) My first attempt at a test install against eDir has left me unable to
close the config. When I attempt to close I get "5004
ERROR_AUTHENTICATION_REQUIRED (You must be authenticated before locking
the configuration)". Any way to get past that?

Thanks,

Al


--
ahidalgo
------------------------------------------------------------------------
ahidalgo's Profile: https://forums.netiq.com/member.php?userid=10766
View this thread: https://forums.netiq.com/showthread.php?t=55456


0 Likes
3 Replies
Knowledge Partner
Knowledge Partner

Re: Testing SSPR questions

On 3/1/2016 3:14 PM, ahidalgo wrote:
>
> 1) If I want to use SSPR for passwords self-service (Universal PW) and
> people search do I do the standalone install or IDM integrated install?
>
> 2) How do I do a clean uninstall?
>
> 3) My first attempt at a test install against eDir has left me unable to
> close the config. When I attempt to close I get "5004
> ERROR_AUTHENTICATION_REQUIRED (You must be authenticated before locking
> the configuration)". Any way to get past that?


All SSPR needs is a Web App server (Tomcat, say, which needs a JVM) and
the WAR file.

If you want to do SSO with User App, Reporting, Access Review,
Landing/Dash, Catalog access then you need OSP (aka IDM integrated).

If you want to do Kerb single sign on or SAML federation into SSPR but
nothing else with IDM, then you can still use IDM integrated (OSP) with
SSPR.

The difference in config between OSP mode SSPR and standalone mode SSPR
is mostly 3 lines of configuration in the SSPR Configuration.


0 Likes
Knowledge Partner
Knowledge Partner

Re: Testing SSPR questions

On 3/1/2016 3:22 PM, Geoffrey Carman wrote:
> On 3/1/2016 3:14 PM, ahidalgo wrote:
>>
>> 1) If I want to use SSPR for passwords self-service (Universal PW) and
>> people search do I do the standalone install or IDM integrated install?
>>
>> 2) How do I do a clean uninstall?
>>
>> 3) My first attempt at a test install against eDir has left me unable to
>> close the config. When I attempt to close I get "5004
>> ERROR_AUTHENTICATION_REQUIRED (You must be authenticated before locking
>> the configuration)". Any way to get past that?

>
> All SSPR needs is a Web App server (Tomcat, say, which needs a JVM) and
> the WAR file.
>
> If you want to do SSO with User App, Reporting, Access Review,
> Landing/Dash, Catalog access then you need OSP (aka IDM integrated).
>
> If you want to do Kerb single sign on or SAML federation into SSPR but
> nothing else with IDM, then you can still use IDM integrated (OSP) with
> SSPR.
>
> The difference in config between OSP mode SSPR and standalone mode SSPR
> is mostly 3 lines of configuration in the SSPR Configuration.


Well maybe 3 or 4 lines. I forget. If you configure it with OSP, (extra
work) the login box is OSP, which can support Name/Password, SAML, or
Kerb. If you do NOT use OSP, you get a login box presented by SSPR,
which is the out of the box config.


0 Likes
ahidalgo1 Absent Member.
Absent Member.

Re: Testing SSPR questions


Thanks, mostly working now.


--
ahidalgo
------------------------------------------------------------------------
ahidalgo's Profile: https://forums.netiq.com/member.php?userid=10766
View this thread: https://forums.netiq.com/showthread.php?t=55456


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.