Maximo List Archive

This is an archive of the Maximo Yahoo Community. The content of this pages may be a sometimes obsolete so please check post dates.
Thanks to the community owner Christopher Wanko for providing the content.



A hopefully simple question about Maximo with Single Sign-On

From: therron (2015-05-21 12:18)

Trying to wrap up a fresh install of Maximo 7.6 on WebSphere WASND 8.5.5.3, which I will then use to migrate our current 6.2.6 system.

However, currently we are using native Maximo security, but I want to try to achieve Single Sign-On. So my really simple questions are:

How does it work? When you "go to Maximo", what happens? Does it just go to your Start Center automatically instead of showing the login screen?

And if that is the case, how does one log in to Maximo as MAXADMIN? You have log in to Windows as MAXADMIN?

Travis Herron


From: Hanna, Christopher A CTR (2015-05-26 12:44)

Yes, when you log in it goes right to the start center. You can configure a "splash" page if desired.
You probably won't want to log on as MAXADMIN anymore anyway. Better to give your administrative users MAXADMIN group. MAXADMIN will have to be set up as an account in AD in order for the application to function, so in theory you could log onto your domain as that user and then hit Maximo. However since locking the MAXADMIN account can bring the app down, probably better to not use that account interactively.
-Chris H
From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com]
Sent: Thursday, May 21, 2015 3:19 PM
To: MAXIMO@yahoogroups.com
Subject: [MAXIMO List] A hopefully simple question about Maximo with Single Sign-On
Trying to wrap up a fresh install of Maximo 7.6 on WebSphere WASND 8.5.5.3, which I will then use to migrate our current 6.2.6 system.
However, currently we are using native Maximo security, but I want to try to achieve Single Sign-On. So my really simple questions are:
How does it work? When you "go to Maximo", what happens? Does it just go to your Start Center automatically instead of showing the login screen?
And if that is the case, how does one log in to Maximo as MAXADMIN? You have log in to Windows as MAXADMIN?
Travis Herron


From: Chris Lawless (2015-05-26 09:21)

I tend to think of it in three "modes". With standard Maximo authentication
you reach the login page, enter a user name and password that are
maintained within Maximo and sign in. The next "mode" is when you have
security synchronized with another repository such as Active Directory, the
process is the same but the account/password are maintained elsewhere (i.e.
you log in with your "Lan ID"). I mention this as some people consider this
to be single sign on (SSO) because they are only using a single
account/password with which to sign on to multiple systems.
The last "mode" is automatic sign on, your "LAN ID" is your logon and the
browser knows who you are so when you hit the Maximo URL it logs you on and
delivers you to the default landing page (usually the Start Center). If you
want to log in with a different account you can bypass the automated login
process by appending appservauth=true to the login URL like this :
https://mymaximourl/maximo/webclient/login/login.jsp?appservauth=true which
will deliver you to the login page as usual where you can login using any
valid ID/password.
Chris Lawless
Director, PwC
On Tue, May 26, 2015 at 8:44 AM, 'Hanna, Christopher A CTR'
christopher.a.hanna@uscg.mil [MAXIMO] <MAXIMO@yahoogroups.com> wrote:
>
>
> Yes, when you log in it goes right to the start center. You can configure
> a "splash" page if desired.
>
> You probably won't want to log on as MAXADMIN anymore anyway. Better to
> give your administrative users MAXADMIN group. MAXADMIN will have to be set
> up as an account in AD in order for the application to function, so in
> theory you could log onto your domain as that user and then hit Maximo.
> However since locking the MAXADMIN account can bring the app down, probably
> better to not use that account interactively.
>
> -Chris H
>
> From: MAXIMO@yahoogroups.com [mailto:MAXIMO@yahoogroups.com]
> Sent: Thursday, May 21, 2015 3:19 PM
> To: MAXIMO@yahoogroups.com
> Subject: [MAXIMO List] A hopefully simple question about Maximo with
> Single Sign-On
>
> Trying to wrap up a fresh install of Maximo 7.6 on WebSphere WASND
> 8.5.5.3, which I will then use to migrate our current 6.2.6 system.
>
> However, currently we are using native Maximo security, but I want to try
> to achieve Single Sign-On. So my really simple questions are:
>
> How does it work? When you "go to Maximo", what happens? Does it just go
> to your Start Center automatically instead of showing the login screen?
>
> And if that is the case, how does one log in to Maximo as MAXADMIN? You
> have log in to Windows as MAXADMIN?
>
> Travis Herron
>
>
>
>
>
>
>


From: therron (2015-05-28 12:36)

Thanks for that, Chris and Chris. Good stuff.

Now to follow up with another ignorant question: How would choosing BASIC or FORM authentication in the web.xml file affect behavior? If you choose FORM, does it always display the Maximo login page? If I'm reading it right, it would always append the
/webclient/login/login.jsp?appservauth=true
part to the address and display the login page, as Chris Lawless mentioned in the previous post. Is that the correct understanding/interpretation?

Travis Herron