LDAP Integration - Revision history

Gityerfix at 01:06, 27 July 2008

2008-07-27T01:06:12Z

Gityerfix at 06:25, 26 July 2008

2008-07-26T06:25:06Z

Gityerfix at 15:21, 18 July 2008

2008-07-18T15:21:55Z

Gityerfix: /* Options Manager */

2008-03-18T14:44:00Z

‎Options Manager

Gityerfix at 14:42, 18 March 2008

2008-03-18T14:42:55Z

Gityerfix: New page: LDAP Integration with Service Desk is a very confusing concept. Service Desk has an LDAP section in Options Manager containing 12 LDAP related items. These options are for contact crea...

2008-03-18T14:22:44Z

New page: LDAP Integration with Service Desk is a very confusing concept. Service Desk has an LDAP section in Options Manager containing 12 LDAP related items. These options are for contact crea...

New page

LDAP Integration with Service Desk is a very confusing concept. Service Desk has an LDAP section in [[Options Manager]] containing 12 LDAP related items. These options are for contact creation and synchronization only. They provide absolutely no authentication functionality. It is common for organizations to spend time configuring the Options manager LDAP options with the assumption that they have something to do with authentication.

== Bulk Contact Import ==
Service Desk offers no such capabilities. These is a function that has been requested for years but no out-of-the-box solution has been provided by CA. There is good news though. According to sources, the forthcoming r12 release will contain a bulk import feature. In the meantime, the only options is the creation of custom utilities or scripts.

== Options Manager ==
[[Options Manager|Click Here]]

== Authentication ==
[[Image:r11_AT_screenshot.gif|thumb|r11 Web Authentication Screenshot]]
It is common for organizations to spend time configuring the Options manager LDAP options with the assumption that they have something to do with authentication. But the reality is, LDAP authentication is much more simpler to configure than setting 12 options. The Service Desk default authentication process is set in each [[Access Type]]. If '''Allow External Authentication''' is selected, Service Desk hands-off authentication responsibility to its host server. If the host server is a member of a domain (which it most likely is), it hands-off authentication to Active Directory. So the end result is LDAP authentication but not because Service Desk was configured to authenticate that way, but because it was configured to let the server take care of it and the server is configured to let Active Directory take care of it.

SD > Server > LDAP

== eIAM for Authentication ==
As mentioned in the previous section, LDAP authentication can be easily achieved with very little configuration. However, eIAM does offer an LDAP authentication option as well. eIAM can be configured to utilize an LDAP directory in place of it's own internal repository for authentication. So if eIAM was configured in this manner, and Service Desk was set-up to utilize eIAM for authentication, LDAP can be used for authentication into Service Desk.

SD > eIAM > LDAP

So just like the example above, eIAM LDAP authentication goes through a process of 2 hand-offs as well. And there is a downside to using eIAM. This downside is that eIAM does not allow for bypassing the login screen. If '''Allow External Authentication''' is utilized, the login screen is bypassed. Using eIAM does not provide any such convenience.

The value of eIAM is minimal and its use should only be considered if CA Workflow is being actively utilized. CA Workflow uses eIAM exclusively for authentication so its use for Service Desk should only be considered if using CA Workflow. But even if CA Workflow is used, that doesn't necessarily mean it is an ideal choice for Service Desk authentication.

@@ Line 1: / Line 1: @@
 __NOTOC__
 [[Category:Customizations]]
-<div align='center'><font color="green">To make corrections or additions to this article, select the ''edit'' tab above.<br>
+{{Global Header}}
-To discuss or ask questions about this article, select the ''discussion'' tab above.</font></div>
+{{Global Announcement}}
 == Overview ==

@@ Line 4: / Line 4: @@
 Service Desk offers no such capabilities. These is a function that has been requested for years but no out-of-the-box solution has been provided by CA. There is good news though. According to sources, the forthcoming r12 release will contain a bulk import feature. In the meantime, the only options is the creation of custom utilities or scripts.
 == Authentication ==
@@ Line 25: / Line 22: @@
 The value of eIAM is minimal and its use should only be considered if CA Workflow is being actively utilized. CA Workflow uses eIAM exclusively for authentication so its use for Service Desk should only be considered if using CA Workflow. But even if CA Workflow is used, that doesn't necessarily mean it is an ideal choice for Service Desk authentication.
 ----
-<div align='center'><font color="red">To make corrections or additions to this article, select the ''edit'' tab above.<br>
+<div align='center'><font color="green">To make corrections or additions to this article, select the ''edit'' tab above.<br>
 To discuss or ask questions about this article, select the ''discussion'' tab above.</font></div>
 [[Category:Integration]]

← Older revision		Revision as of 14:42, 18 March 2008
Line 26:		Line 26:

	The value of eIAM is minimal and its use should only be considered if CA Workflow is being actively utilized. CA Workflow uses eIAM exclusively for authentication so its use for Service Desk should only be considered if using CA Workflow. But even if CA Workflow is used, that doesn't necessarily mean it is an ideal choice for Service Desk authentication.		The value of eIAM is minimal and its use should only be considered if CA Workflow is being actively utilized. CA Workflow uses eIAM exclusively for authentication so its use for Service Desk should only be considered if using CA Workflow. But even if CA Workflow is used, that doesn't necessarily mean it is an ideal choice for Service Desk authentication.
		+
		+
		+	----
		+	<div align='center'><font color="red">To make corrections or additions to this article, select the ''edit'' tab above.<br>
		+	To discuss or ask questions about this article, select the ''discussion'' tab above.</font></div>
		+
		+	[[Category:Integration]]

@@ Line 1: / Line 1: @@
 LDAP Integration with Service Desk is a very confusing concept. Service Desk has an LDAP section in [[Options Manager]] containing 12 LDAP related items. These options are for contact creation and synchronization only. They provide absolutely no authentication functionality. It is common for organizations to spend time configuring the Options manager LDAP options with the assumption that they have something to do with authentication.
 == Bulk Contact Import ==
 Service Desk offers no such capabilities. These is a function that has been requested for years but no out-of-the-box solution has been provided by CA. There is good news though. According to sources, the forthcoming r12 release will contain a bulk import feature. In the meantime, the only options is the creation of custom utilities or scripts.
 == Authentication ==
 [[Image:r11_AT_screenshot.gif|thumb|r11 Web Authentication Screenshot]]
 It is common for organizations to spend time configuring the Options manager LDAP options with the assumption that they have something to do with authentication. But the reality is, LDAP authentication is much more simpler to configure than setting 12 options. The Service Desk default authentication process is set in each [[Access Type]]. If '''Allow External Authentication''' is selected, Service Desk hands-off authentication responsibility to its host server. If the host server is a member of a domain (which it most likely is), it hands-off authentication to Active Directory. So the end result is LDAP authentication but not because Service Desk was configured to authenticate that way, but because it was configured to let the server take care of it and the server is configured to let Active Directory take care of it.
 SD > Server > LDAP
 == eIAM for Authentication ==
@@ Line 17: / Line 20: @@
 SD > eIAM  > LDAP
 So just like the example above, eIAM LDAP authentication goes through a process of 2 hand-offs as well. And there is a downside to using eIAM. This downside is that eIAM does not allow for bypassing the login screen. If '''Allow External Authentication''' is utilized, the login screen is bypassed. Using eIAM does not provide any such convenience.
 The value of eIAM is minimal and its use should only be considered if CA Workflow is being actively utilized. CA Workflow uses eIAM exclusively for authentication so its use for Service Desk should only be considered if using CA Workflow. But even if CA Workflow is used, that doesn't necessarily mean it is an ideal choice for Service Desk authentication.
 == See Also ==
 [[Options Manager#LDAP|Options Manager]]

@@ Line 6: / Line 6: @@
 == Options Manager ==
-[[Options Manager|Click Here]]
+[[Options Manager#LDAP|Click Here]]
-−
 == Authentication ==