Customizing Authentication in CA Performance Center › CA Single Sign-On › Single Sign-On Configuration Tool

Single Sign-On Configuration Tool

The Single Sign-On Configuration Tool is a command-line application that lets administrators adjust the settings for the Single Sign-On website and the associated CA data source products.

Use the Single Sign-On Configuration Tool to perform the following tasks:

• Configure data source products to use LDAP authentication.

  All of the LDAP settings for each product are updated using this tool. You can also test the current LDAP configuration to verify settings.

• Configure data source products to use SAML 2.0 authentication.

  In addition to using the Configuration Tool, the administrator must also take some steps on the Identity Provider to set up SAML authentication.

• Update the Single Sign-On virtual directory that each product references.

  If you added an encryption scheme or changed the Single Sign-On virtual directory, use this tool to synchronize the data source products. For example, data sources on the modified server need instructions on where to redirect users who do not successfully authenticate.

• Enable communications among servers running CA software products using HTTPS.

  This change affects the Single Sign-On URL scheme and port. The Single Sign-On Configuration Tool lets administrators easily update these values in all of the necessary data source products.