Install the Domain Orchestrator › Prerequisites to Installing the Domain Orchestrator › CA EEM Prerequisites › Plan How to Authenticate CA Process Automation Users

Plan How to Authenticate CA Process Automation Users

If this is a new CA Process Automation installation, part of preparation is determining how to authenticate CA Process Automation users. The actual setup described here is performed after installation is complete. However, the authentication method that is chosen determines the settings specified during the CA Process Automation installation. Authentication options include:

CA EEM-based Authentication

• Native CA EEM-based user

  Prerequisites

  Installation of CA EEM

  Details

  A CA EEM administrator creates a user account in CA EEM for each user who requires access to CA Process Automation. The CA EEM administrator provides each user with a login ID. Users can update their own passwords in CA EEM.  When users log in to CA Process Automation, CA EEM authenticates users by verifying that the entered User ID and password (credentials) belong to an active user account.

  Action that is required during CA Process Automation installation

  No special action required.

• Reference to LDAP directory

  Prerequisites

  • Installation of CA EEM
  • Access to an external LDAP-based directory

  Details

  The following directory types and configurations are available:

  • Active Directory (AD)

    CA EEM can be configured to reference user accounts that are stored in one or more Microsoft Active Directories. CA Process Automation passes CA EEM the login credentials. CA EEM finds the AD that matches the domain part of the user ID (if relevant) and authenticates the user if the user ID is listed within that AD domain.

  • Non-AD LDAP-based directory

    CA EEM can also be configured to use an LDAP-based directory other than AD. Authentication is handled the same way in this case.

  Action that is required during CA Process Automation installation

  No special action required.

• Single Sign On using NTLM authentication

  Prerequisites

  • Same prerequisites as when using AD with the previous LDAP directory option.
  • You must be able to meet the prerequisites for configuring NTLM authentication.

    Note: One of the requirements is that CA Process Automation users run a Windows operating system and be in the same Domain as, or in Domains with trusted relationships to, the CA EEM server.

  Details

  CA EEM handles authentication through NTLM when users browse to CA Process Automation. Authenticated users are logged in with their Windows credentials.

  Action that is required during CA Process Automation installation

  Select the NTLM option on the CA EEM wizard page during CA Process Automation installation. This is the recommended way to enable SSO.

  Note: You can enable NTLM pass-through authentication after installation, if required.

SiteMinder-based Authentication

• Single Sign On using CA SiteMinder

  Prerequisites

  See the SiteMinder documentation for specific information.

  Details

  SiteMinder authenticates with an external directory and sends the user name to CA Process Automation. The user is then authorized in CA EEM. See Using SiteMinder with CA Process Automation for details.

  Action that is required during CA Process Automation installation

  SiteMinder hostname and headers are specified on load balancer wizard page.