Maximo List Archive

This is an archive of the Maximo Yahoo Community. The content of this pages may be a sometimes obsolete so please check post dates.
Thanks to the community owner Christopher Wanko for providing the content.



Configure Maximo 7.1 with LDAP authentication and authorization with WebSphere SSO Help

From: fdeghadi (2012-11-11 09:59)

Hi All,

We are using Maximo 7, Web Sphere Platform 6.1 [ND 6.1.0.23 cf230910.10] ,I
was able to configure Maximo with LDAP And be able to fetch users and groups
to Maximo and it is working good.
I was expecting to login to my client Windows machine when browse to the
Maximo URL it automatically log me into Maximo without asking for username
and password
Now need to configure Maximo 7.1 with LDAP authentication and authorization
with Web Sphere SSO , any procedure , help or missing setting that may
help me ,
Can any one assist me in this?



Thanks
Fathi deghadi




From: andrew.tess (2012-11-13 17:23)

The ibm technology you are looking for is SPNEGO. You are already halfway there with the LDAP working. The instructions for doing the SPNEGO part of this are really on the websphere side of things (setting it up for what is called "Integrated Authentication" in the microsoft world). We did this on 7.5, win2008r2, WAS 7 with MS Active Directory 2008r2.
We followed the instructions containted in (it has both WAS 6.1 (maximo 7.1) and WAS 7 (Maximo 7.5) instructions)
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101065
and also the instructions specific to WAS 7 at
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp?topic=%2Fcom.ibm\
.websphere.base.doc%2Finfo%2Faes%2Fae%2Ftsec_SPNEGO_config_web.html
Hopefully this is the missing element you are looking for!
Andy
--- In MAXIMO@yahoogroups.com, "fdeghadi" <fdeghadi@...> wrote:
>
> Hi All,
>
>
>
> We are using Maximo 7, Web Sphere Platform 6.1 [ND 6.1.0.23 cf230910.10] ,I
> was able to configure Maximo with LDAP And be able to fetch users and groups
> to Maximo and it is working good.
>
> I was expecting to login to my client Windows machine when browse to the
> Maximo URL it automatically log me into Maximo without asking for username
> and password
>
> Now need to configure Maximo 7.1 with LDAP authentication and authorization
> with Web Sphere SSO , any procedure , help or missing setting that may
> help me ,
>
> Can any one assist me in this?
>
>
>
>
>
>
>
> Thanks
>
> Fathi deghadi
>
>
>
>
>
>
>
>
>
>
>


From: (2013-11-29 07:21)

Will SSO allow users to click on a link in an email to a specific Maximo record (i.e. WORKORDER) and go right to the WO Application and see the details. Can the URL be built without a user/pw in it to take advantage of SSO? Any reference materials about this method would be appreciated.


Thanks,
Miller


---In maximo@yahoogroups.com, <atess@...> wrote:

The ibm technology you are looking for is SPNEGO. You are already halfway there with the LDAP working. The instructions for doing the SPNEGO part of this are really on the websphere side of things (setting it up for what is called "Integrated Authentication" in the microsoft world). We did this on 7.5, win2008r2, WAS 7 with MS Active Directory 2008r2.
We followed the instructions containted in (it has both WAS 6.1 (maximo 7.1) and WAS 7 (Maximo 7.5) instructions)
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101065 http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101065
and also the instructions specific to WAS 7 at
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp?topic=%2Fcom.ibm\ http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp?topic=%2Fcom.ibm\
.websphere.base.doc%2Finfo%2Faes%2Fae%2Ftsec_SPNEGO_config_web.html

Hopefully this is the missing element you are looking for!

Andy


--- In MAXIMO@yahoogroups.com mailto:MAXIMO@yahoogroups.com, "fdeghadi" <fdeghadi@...> wrote:
>
> Hi All,
>
>
>
> We are using Maximo 7, Web Sphere Platform 6.1 [ND 6.1.0.23 cf230910.10] ,I
> was able to configure Maximo with LDAP And be able to fetch users and groups
> to Maximo and it is working good.
>
> I was expecting to login to my client Windows machine when browse to the
> Maximo URL it automatically log me into Maximo without asking for username
> and password
>
> Now need to configure Maximo 7.1 with LDAP authentication and authorization
> with Web Sphere SSO , any procedure , help or missing setting that may
> help me ,
>
> Can any one assist me in this?
>
>
>
>
>
>
>
> Thanks
>
> Fathi deghadi
>
>
>
>
>
>
>
>
>
>
>


From: Hanna, Christopher A CTR (2013-12-02 12:43)

Yes, SSO will allow you to construct a URL that will take you right to a given record, and of course you should never pass credentials in clear text in a URL.

The format is as follows (I am on 7.5, but I believe it is the same for 7.1).
http(s)://<server>:<port>/maximo/ui/?event=loadapp&value=<application>&forceload=true&uniqueid=123456

Where uniqueid is the value in the defined unique column for the main MBO of the app being launched.

For example to launch workorder tracking bringing up a work order with a workorderID of 123456

http://myserver.example.com:80/maximo/ui/?event=loadapp&value=wotrack&forceload=true&uniqueid=123456

-Chris H


-----Original Message-----
From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com] On Behalf Of david_miller_33139@yahoo.com
Sent: Friday, November 29, 2013 10:21 AM
To: MAXIMO@yahoogroups.com
Subject: [MAXIMO List] RE: Configure Maximo 7.1 with LDAP authentication and authorization with WebSphere SSO Help



Will SSO allow users to click on a link in an email to a specific Maximo record (i.e. WORKORDER) and go right to the WO Application and see the details. Can the URL be built without a user/pw in it to take advantage of SSO? Any reference materials about this method would be appreciated.




Thanks,

Miller



---In maximo@yahoogroups.com, <atess@...> wrote:


The ibm technology you are looking for is SPNEGO. You are already halfway there with the LDAP working. The instructions for doing the SPNEGO part of this are really on the websphere side of things (setting it up for what is called "Integrated Authentication" in the microsoft world). We did this on 7.5, win2008r2, WAS 7 with MS Active Directory 2008r2.
We followed the instructions containted in (it has both WAS 6.1 (maximo 7.1) and WAS 7 (Maximo 7.5) instructions)
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101065
and also the instructions specific to WAS 7 at http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp?topic=%2Fcom.ibm\
.websphere.base.doc%2Finfo%2Faes%2Fae%2Ftsec_SPNEGO_config_web.html

Hopefully this is the missing element you are looking for!

Andy




--- In MAXIMO@yahoogroups.com, "fdeghadi" <fdeghadi@...> wrote:
>
> Hi All,
>
>
>
> We are using Maximo 7, Web Sphere Platform 6.1 [ND 6.1.0.23 cf230910.10] ,I
> was able to configure Maximo with LDAP And be able to fetch users and groups
> to Maximo and it is working good.
>
> I was expecting to login to my client Windows machine when browse to the
> Maximo URL it automatically log me into Maximo without asking for username
> and password
>
> Now need to configure Maximo 7.1 with LDAP authentication and authorization
> with Web Sphere SSO , any procedure , help or missing setting that may
> help me ,
>
> Can any one assist me in this?
>
>
>
>
>
>
>
> Thanks
>
> Fathi deghadi
>
>
>
>
>
>
>
>
>
>
>