Enabling / Disabling SSO For An Application

Enabling SSO in integration env

Example: pbcats application
Prerequisits: Go to Siteminder registration tool link https://weistool.nj.ssmb.com/
Login to the site using sitminder credentials.
Click on production under Siteminder registration tool.
Login using siteminder credentials
Click on dev under Request Update
Search for the application.
URLs need to be added in albpm.config.xml under sso tag at
/opt/bpmste/pbcatscfg/int

• Stop the weblogic domain on both the servers.

• Back up setEnv, portal, webconsole files and directories.
• Change to /opt/bpmste/pbcatscfg/int
• Set enable-sso flag to true in albpm.config.xml file.
• Change to /opt/bpmste/setuputil.
• Run bpminit.ksh script with enable-sso target.
• Run bpminit.ksh script with build-portal-war.
• Run bpminit.ksh script with buld-webconsole-war
• Go to the weblogic domain directory and delete the cache of the admin, node1
and node2 on respective servers.
• Start the weblogic domain on both the servers.
• When you try to access the webconsole and portal it prompts the sso sign on error.
• After enabling sso we can run albpm-upgrade also.

Disabling SSO :

• Stop the weblogic domain on both the servers.

• Back up setEnv, portal, webconsole files and directories.
• Change to /opt/bpmste/pbcatscfg/int
• Set enable-sso flag to true in albpm.config.xml file.
• Change to /opt/bpmste/setuputil.
• Run bpminit.ksh script with disable-sso target.
• Change sso flag to false in albpm.config.xml
• Run bpminit.ksh script with build-portal-war.
• Run bpminit.ksh script with buld-webconsole-war
• Go to the weblogic domain directory and delete the cache of the admin, node1
and node2 on respective servers.
• Start the weblogic domain on both the servers.
• You should be able to access webconsole and portal as usual by hitting the servers
directly.
Support Manager Ticket 76990 Enable SSO for DSH. Related VC 09227663

Example:

</webconsole>
<sso enabled="true">
<portal>

<startupServlet>fuego.portal.servlet.deploy.UserPrincipalStartup</startupServlet>
<loginServlet>com.citi.servlet.sso.SiteMinderSSOLogin</loginServlet>
<loginURL>https://isw.nj.ssmb.com/portal</loginURL>

<logoutServlet>com.citi.servlet.sso.SiteMinderSSOLogout</logoutServlet>

<logoutURL>https://isw.nj.ssmb.com/siteminderagent/forms/logout.html</logoutURL>
</portal>
<portalAdmin>

<loginClassName>com.citi.sso.SiteMinderSSOUserLogin</loginClassName>
<loginURL>https://isw.nj.ssmb.com/portalAdmin</loginURL>

<logoutURL>https://isw.nj.ssmb.com/siteminderagent/forms/logout.html</logoutURL>
</portalAdmin>
<webConsole>

<loginClassName>com.citi.sso.SiteMinderSSOUserLogin</loginClassName>
<loginURL>https://isw.nj.ssmb.com/console</loginURL>

<logoutURL>https://isw.nj.ssmb.com/siteminderagent/forms/logout.html</logoutURL>
</webConsole>