Clarity

 View Only
Expand all | Collapse all

Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

  • 1.  Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 03, 2016 05:25 PM

    The company is evaluating this option, but not sure if it's feasable.

    Any experience integrating Clarity On Demand with the company's Active Directory or other LDAP?



  • 2.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 07, 2016 07:33 PM

    Please speak with your CA Account Executive before you go too far down this road.

     

    At this time (I don't think there is any effort being made to change this), LDAP is only for On Premise installations. The jobs are not available OnDemand.



  • 3.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 05, 2018 11:13 PM

    As a FYI, LDAP is not available for On Premise.  SiteMinder or 3rd party 'SSO' tool required.  We recently requested verification via CA Support for an On Premise client.  They are still continuing to use SiteMinder following feedback from CA Support.



  • 4.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Broadcom Employee
    Posted Nov 06, 2018 12:51 PM

    Hi Roland,

     

    LDAP is ONLY available to On Premise customers.  It is not secure enough for interactions across the internet.  It is perfectly fine for usage on an intranet.   Federated SSO provides enough security for interactions across the internet.  So that is what is used by our On Demand systems.



  • 5.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 08, 2016 03:18 AM

    Hi

     

    Yes, it's possible via customization, not OOTB. We usually integrate it via delimited csv file using SaaS sFTP.

     

    thx

    Aurora



  • 6.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 08, 2016 11:12 AM

    Hi Aurora,

    Does this custom solution sync passwords as well?



  • 7.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Nov 08, 2016 11:20 AM

    Hi

     

    It does not, for that it's better to integrate SSO.

    We sync users (creation, update, deactivation) and sometime even groups.

     

    Thx

    Aurora



  • 8.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Dec 12, 2016 02:54 PM

    Hi Aurora:

    How do you exactly sync them?

    I understand that if LDAP integration does not work, then the 2 Clarity Jobs related to LDAP (LDAP - Synchronize New and Changed Users, 
    LDAP - Synchronize Obsolete Users) will not work either. Right?



  • 9.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?

    Posted Dec 19, 2016 02:46 PM

    These LDAP jobs do not exist in OnDemand environments.

    You can get halfway using XOG, but that's a resource/group sync, not LDAP



  • 10.  Re: Any succesful experience with CA Clarity PPM On Demand (SaaS) using LDAP?
    Best Answer

    Broadcom Employee
    Posted Dec 12, 2016 03:22 PM

    Hi,

     

    LDAP is not secure enough to be used across the internet with your On Demand System.  SSO can be used instead.  If you use a federated SSO such as OCTA or SiteMinder's Federation Manager, your users can still use their LDAP passwords even though LDAP is not directly interfacing with the On Demand System.

     

    You can use ODUM (uploading flat files via a tool you install on your desk top) or a custom WSDL implementation to  sync your users with the On Demand Portal.  Your users will be automatically added to Clarity when they are added to one of your environments whether that is done when you first upload them or later on.

     

    Test and Dev environments userbases are usually maintained when you refresh from your production system's database.  However, users can be added at any time to those environments via the portal.

     

    I hope this helps.

     

    Let me know if you have further questions.

     

    Sincerely yours,

     

    Jeanne Gaskill