Configuring Resources › Automating Processes with CA Process Automation › Configure CA Process Automation for Single Sign-On

Previous Topic: CA Process Automation Prerequisites

Next Topic: Access the CA EEM User Interface

Configure CA Process Automation for Single Sign-On

Run the CA EEM safex utility to generate a certification file and specify a CA Server Automation server for single sign-on for that CA Process Automation server. To use single sign-on, CA Process Automation must be configured with CA EEM and the safex tool must be run against the ITPAM_eem.xml file.

To configure CA Process Automation and CA EEM for single sign-on

  1. Locate the ITPAM_eem.xml file on DVD2 of the CA Process Automation installation media and copy the file to a directory on the C: drive.
  2. (Optional) Edit the certificate name or password or change other properties such as application name, group name, and user name. The name and password entries follow: 
    Register certfile="itpamcert.p12" password="itpamcertpass"
  3. Locate the safex.exe tool on the CA EEM installation media and issue the following command: 
    CA_EEM_Installation_Path/safex.exe -h hostname -u EiamAdmin -p eiamadminpass -f ITPAM_EEM.xml

    Note: The default directory for the safex tool is Program Files/CA/SharedComponents/iTechnology/ and the tool is automatically copied when you install CA EEM.

    The safex.exe tool runs and creates the certificate file, itpamcert.p12 in the default directory. The tool also creates the groups, ITPAMAdmins and ITPAMUsers and the users itpamadmin and itpamuser.

  4. Log in to the CA EEM UI on the CA Process Automation server.
  5. Verify that the groups and users created by the safex tool are available in Manage Identities, Groups in the CA EEM UI.
  6. Reset the passwords of the users to the desired passwords.
  7. Select EEM from the drop-down list in the CA Process Automation installation and complete the following fields:
    EEM Server

    Identifies the host name of the CA EEM server.

    Example: itpamserver.itpam.ca.local

    EEM Application Name

    Identifies the name of the CA EEM application instance.

    Example: ITPAM

    EEM Certificate File

    Identifies the full path to the certification file.

    Example: Program Files/CA/SharedComponents/iTechnology/itpamcert.p12

    EEM Certificate Password

    Identifies the password for the certificate file.

    Example: itpamcertpass

    The CA EEM security settings are configured.