News & comment tagged ‘sso plugin’
● SSO Plugin for HP Asset Manager
posted by John B on 8th April 2012
We are pleased to announce the first release of SSO Plugin for HP Asset Manager 9.3+. We've worked on this solution in conjunction with HP and will continue to develop it as we receive community feedback.
You can download it as part of the HP for Service Manager package.
● JSS donate SSO Plugin to UK children's charity
posted by John B on 4th April 2012
We were recently approached by Action for Children to provide an SSO solution for BMC ITSM.
Danny Kellett commented, "After discovering the good work the charity provides for disadvantaged children in the UK, I recommended a free production license."
Brychan Watkins, head of IS at the charity, provided the following feedback:
At Action for Children we help over 150,000 vulnerable children and young people, with over 430 sites across the UK. Providing an efficient IT support infrastructure is key to our current and future success. A central part of providing this support is the BMC Remedy ITSM system.
To help improve our Remedy system we required a robust and efficient SSO solution and that's where Java Systems Solutions with their SSO Plugin came in.
It took just three days from our initial contact to having it installed on our test system. With guidance from Danny it took us less than an hour to install and configure, and it worked first time. We now have a working environment with SSO enabled in a fraction of the time that I had expected from an SSO integration. This is not only a testament to the product but also to the efficiency and expertise of the Java Systems Solutions' staff. They have also kindly donated the license for the product to us for which we are extremely grateful.
I would like to end this by saying thank you to John, Danny and all those at Java Systems Solutions for their help and support.
● Bringing Ping Federate to BMC and HP ITSM
posted by John B on 9th February 2012
There's a (mistaken) belief that SAML is easy, and that a product with SAML support will integrate with other SAML products.
This is not correct.
Each vendor implements the standard how they see fit and products need to be validated to ensure compatibility.
Ping Federate is a well known SAML Identity Provider implementation that's used for providing Internet based SSO. SSO Plugin (3.5.6) has been validated against Ping Federate and JSS will support this deployment.
If Internet SSO is a requirement, you can now rely on Ping Federate and SSO Plugin to provide a solution.
● SSO Plugin newsletter
posted by John B on 26th January 2012
Welcome to a newsletter from Java System Solutions. In our newsletter you will find recent SSO Plugin technical developments, partner news, and feedback from SSO Plugin clients.
What's new in SSO Plugin
Every day, new features are being added to SSO Plugin. Here are a selection of recent features.
SSO Plugin (version 3.5) introduces SSO for BMC IT Business Management (BMC ITBM)
Working closely with a global investment bank based in North America, JSS listened to the needs of the BMC market and SSO enabled another BMC application, BMC ITBM.
SSO Plugin gains popularity in the cloud with SAML and ADFS
As we see more clients gaining the benefit of cloud based services, single sign on over the internet needs to be secure. SAML provides that level of security confidence and SSO Plugin can utilise this to interface with Microsoft Active Directory Federation Service (ADFS).
John Baker has written an explanation of SAML.
Continued MS Active Directory integration improvements
As Microsoft continue to develop their Integrated Windows Authentication implementation, SSO Plugin continues to evolve. For customers introducing Windows 7, please consider an upgrade to SSO Plugin 3.5 in order to ensure the most complete AD integration support.
Partner news
Our partners are actively promoting and deploying SSO Plugin.
Helios IT publish a huge cost saving due to SSO Plugin at HCFB
Helios IT, a Russian BMC partner company, has deployed SSO Plugin to Home Credit and Finance Bank. They've written an article on the ITSM implementation and how SSO Plugin helped increase usage of the BMC ITSM application by 40%.
An English version of the article is available with thanks to Google Translate.
Materna continue to publicise the benefits of SSO Plugin
Materna, a respected European BMC partner, report on another successful year with SSO Plugin and have written an article in their industry magazine Materna Monitor.
You can find it on page 32 of Materna Monitor.
Exciting times for SSO Plugin and the HP Enterprise Management Alliances Program
During the last five years, JSS has worked tirelessly to gain a reputation in the BMC market for an excellent product and superb support. This achievement had not gone unnoticed in other markets, and SSO Plugin is now available for HP Service Manager and the HP Service Request Catalog.
We've produced a video of this functionality.
Thrilled with this new addition to the HP ITSM product set, HP have invited JSS to join the HP Enterprise Management Alliances Program and meet HP customers at the “HP Discover” Vegas event in June 2012.
If any BMC partners are attending this event, please let us know if you'd like to meet us and discuss this new opportunity.
Feedback from our customers
JSS put customer service first. With our offer of free professional services and dedication to SSO Plugin, we continue to receive good feedback and would like to share a couple recent quotes:
We had issues with SSO on our upgrade go-live weekend and the technical support team had answers to our questions within 5 minutes of contacting them. And the fix recommended by them solved our problem. The level of support provided by them is of premium quality. They know their product very well which is evident infs the quality of the support.” (Anusha D, US)
It’s inconceivable to me that Remedy does not support single sign on out of the box; while pretty much every competing product does. Customers expect to have this fundamental functionality, and we were shocked when we heard Remedy didn't. Users were extremely disappointed and immediately disliked Remedy. Thankfully we came across JSS and it they have made our lives easier in that regard.” (Osama S, UAE)
● Security experts putting more demands on users with longer more complex passwords
posted by Danny Kellett on 23rd January 2012
JSS keep abreast of publications regarding passwords and security and this article on the popular CSO site caught our attention.
Christopher Frenz, CTO at See-Thru and a faculty member at Mercy College, both in New York, says:
"the problem is not because of passwords being obsolete, but because of the prevalence of bad passwords and bad password practices." He admits that high-quality passwords are difficult for users to remember, especially if users (as they should) have different ones for possibly dozens of sites."
Furthermore, Owain Rees, information security officer for BBC-TV in the UK, agrees:
"The only way to make a password more effective is to make it longer. In most cases a very long simple password is more difficult to break than a smaller complex password,"
Matthew Walker, manager at ShieldPass in Singapore comments,
"The current trend among IT administrators is to insist that users increase the complexity of their passwords and change them at regular intervals. This makes managing online passwords a living hell; and yet it makes not one bit of difference to the malware that commonly intercepts and copies them."
While the security and administration experts spend endless hours and millions of dollars figuring the best approach to teach our users to use and remember long, complex passwords while, as stated above creating a “living hell” for everyone involved, JSS will continue to invest in removing all the living nightmares stated above by removing the need for passwords.
It sounds quite simple: If managing passwords is a “living hell”, leaves your applications open to lazy passwords, cost time and money to maintain, then maybe it’s time to implement single sign on.
● SSO for BMC ITBM
posted by John B on 7th January 2012
SSO Plugin (version 3.5.4) introduces SSO for BMC IT Business Management (BMC ITBM).
The solution allows for both SSO and non-SSO logins to BMC ITBM, an improvement on the "out of the box" functionality that appeared to be both untested and lacking in support for non-SSO users.
This integration adds yet another BMC product to the list of SSO Plugin supported solutions and is available immediately.
● SSO Plugin, around the world
posted by Danny Kellett on 2nd January 2012
With 2011 at a close, SSO Plugin has once again grown in popularity within the BMC market.
Banks, retail, public service, educational, technology, pharmaceutical, US military and government: SSO Plugin has been deployed to organisations in all these sectors during 2011.
Customers have continued to provide great feedback in the quotes section of our website, such as Tony R from a large US medical organisation who wrote:
They stayed with me in support throughout the night of our install even though our maintenance window started at 3am London time!
This single statement underlines the offering from JSS: we don't simply provide a quality product driven by listening to customers and implementing feedback, we provide support that's rated above our competitors. And we continue to offer upfront inclusive professional services at no cost, to deploy SSO Plugin in your environment to ensure it meets your requirements without any cost or commitment.
This year also saw the release of exciting integrations to BMC Dashboards, Analytics and SAP Business Objects. It didn't take long for existing customers to deploy these integrations, including a US military customer who implemented the BMC integrations without a single remote support session from ourselves, by following our instructions and online videos. We've also gained custom in the HP market with the release of SSO Plugin for HP Service Manager and Service Request Catalog.
And during 2012, new integrations will be announced.
We wish everyone a happy and prosperous new year and we look forward to working with you in 2012.
● What's SAML?
posted by John B on 21st December 2011
SAML is a protocol for allowing authentication over the Internet, typically associated with SSO.
Consider a company wishing to use an Internet based Remedy On Demand service who's already enjoying SSO Plugin on their corporate network. Users don't need to login to ITSM and if the company moved to Remedy On Demand (without SSO Plugin), users would have to login. This would result in fewer people raising tickets, because people don't like barriers. However, users can have SSO access to Remedy On Demand by requesting SSO Plugin and using SAML to integrate with their Active Directory Federation Service.
The high level process is as follows:
User is sitting inside the corporate network and they try to access Remedy On Demand. They are not authenticated so typically, a login page would appear.
With SSO Plugin installed on RoD, an XML request is created (by SSO Plugin) and the user's browser is redirected to the corporate Active Directory Federation Service with the XML request.
ADFS decodes the XML request and decides if it's from a known third party. Once this has been established, ADFS authenticates the user and creates an XML response. The user's browser is redirected back to Remedy on Demand complete with the XML response.
The request hits RoD and SSO Plugin intercepts it. The XML response is discovered, decoded, verified to be from ADFS (using public/private keys), and a username extracted. SSO Plugin now continues with an SSO login to RoD.
User now has access to RoD using their standard Windows login, just as they did before moving to RoD.
It's also worth noting that a number of these technologies exist, it just happens that SAML and OpenID (which Google seem to promote) are more common than others. The concept is essentially the same: an exchange of tokens, with layers of encryption, to pass a username (and other associated information, such as a list of Active Directory roles) from one system to another without the systems directly interacting with each other.