Anyone integrated Azure with Spectrum SAML authorization?

[Robert Edberg]

Starting from CA Spectrum 10.2.1 release, Spectrum uses SAML authentication to allow OneClick to use SAML Single Sign-On security management capabilities to authenticate CA Spectrum users. 

 

Azure SAML

Learn about the different token and claim types supported by Azure AD | Microsoft Docs 

[Nagesh Jaiswal]

RoberthEdberg, 

 

Spectrum does not support SAML out of box but via Siteminder. 

 

Thanks,

Nagesh 

[Robert Edberg]

Hmm... Are you sure Nagesh_Jaiswal 

 

I have a document received from CA stating: 

Starting from CA Spectrum 10.2.1 release, the Spectrum uses SAML authentication to allow OneClick to use SAML Single Sign-On security management capabilities to authenticate CA Spectrum users. 

 

 

Text captured from my v10.3.0.0.341 production environment, Spectrum Admin GUI:

 

Single Sign-On Configuration

[Nagesh Jaiswal]

Hello RoberthEdberg, 

 

Let me clarify. The later one is true. SAML is supported via EEM and Siteminder. 

 

But the former one which is from product documentation was not supported. And we claimed it to be Alpha test only. 

Features and Enhancements - CA Spectrum - 10.2 to 10.2.3 - CA Technologies Documentation 

 

So to summarize, CA Spectrum does not support SAML out of box. But via our security products like Siteminder and EEM. 

 

Hope this helps. 

 

Thanks,

Nagesh 

[Robert Edberg]

I'm back! :)
OK, Now when SAML finally is supported by Spectrum (v10.4.1), is there any plans to include groups-2-role mappings also? Today, only authorization is supported, would be nice to move role configuration outside of Spectrum.

/Roberth

[Clyde Menezes]

We're looking for this too. Groups to role mappings would be a really nice improvement.

[Clyde Menezes]

I can't seem to tell from the documentation if SAML is supported for the Web App or the Java OC App or both. Any ideas?

Clyde

[Robert Edberg]

I think it works. I haven't had time yet to get it working, but I beleive it handle java too.

/Rob

[Donald Laberge]

Hello,

It *should* work for both as the user would be authenticated with they first connect to the environment. 
WebApp does not ask for authentication ( as you may have noticed ) because you have logged into the HTML page and launch it from there.
If the SSO aspect of the integration Functions as Imagined,  it should take care of you launching and authentication into the local Java One Click client.

We are trying to get it working with NetIQ Access manager but of course configuration on the IdP  side is not all the same so were having some hiccups.

Good Luck, keep us Posted.

Don