Customizing Authentication in CA Performance Center › CA Single Sign-On › Single Sign-On Configuration Tool

Single Sign-On Configuration Tool

The Single Sign-On Configuration Tool is a command-line application that lets administrators adjust the settings for the Single Sign-On website and the associated CA data source products.

Note: The 'Remote Value' option in the Configuration Tool propagates the settings to each registered data source. Use the 'Local Override' option to override the propagated settings on a selected server.

The Single Sign-On Configuration Tool was designed to run on Linux systems. However, you can also deploy it on the Windows servers where data sources are installed. If you launch the Configuration Tool from a Windows server, log in as an Administrator on that server.

Use the Single Sign-On Configuration Tool to perform the following tasks:

• Configure data source products to use LDAP authentication.

  All of the LDAP settings for each product are updated using this tool. You can also test the current LDAP configuration to verify settings.

• Configure data source products to use SAML 2.0 authentication.

  In addition to using the Configuration Tool, the administrator must also take some steps on the Identity Provider to set up SAML 2.0 authentication.

• Update the Single Sign-On virtual directory that each product references.

  If you added an encryption scheme or changed the Single Sign-On virtual directory, use this tool to synchronize the data source products. For example, data sources on the modified server need instructions on where to redirect users who do not successfully authenticate.

• Enable communications among servers running CA software products using HTTPS.

  This change affects the Single Sign-On URL scheme and port. The Single Sign-On Configuration Tool lets administrators easily update these values in all of the necessary data source products.