How to change authentication mode on EEM to use email address?

Document ID:  TEC1943949
Last Modified Date:  08/11/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA Service Desk Manager

Releases

  • CA Service Desk Manager:Release:14.1
  • CA Service Desk Manager:Release:12.9 CA SDM

Components

  • Svc Desk eIAM:SDEIAM
  • UNICENTER SERVICE DESK RXX:USRD
Summary:

There might be cases that customer would rather use the email address instead of the username to login into the CA Embedded Entitlements Manager (EEM) due to the company policies.

If that is the case, it is possible to configure EEM authentication to external Microsoft Windows Active Directory (AD) to filter the user by the corresponding field in AD which contains the user's email address instead of its username.

Environment:
CA Embedded Entitlements Manager - 12.x CA Service Desk Manager (SDM) - 12.9 / 14.1
Instructions:

This configuration can be done directly in EEM by logging as EiamAdmin and navigating to below location:

Configure tab >> User Store >> LDAP Attribute Mapping

Then, create a new custom attribute mapping based on Microsoft Active Directory. Change only “User Authentication Filter”:

  • from: “(&(objectClass=user)(!(objectClass=computer))(sAMAccountName=”
  • to: “(&(objectClass=user)(!(objectClass=computer))(userPrincipalName=”

TEC1943949a.png

Click on "Save As" button to save this new configuration with another name (in this example it is saved as "Custom AD").

TEC1943949b.png

TEC1943949c.png

 

Note:

Customer should be changing the filter according to what is in their AD attributes.

They could use any LDAP browser tool such as JXplorer to verify which AD attribute has the user's email address.

In this example we used "userPrincipalName".

 

Then, create a new mapping to the Microsoft AD and select to use the Custom mapping created (as the example "Custom AD"). For this, navigate to below location:

Configure tab >> User Store >> User Store

TEC1943949d.png

TEC1943949e.png

TEC1943949f.png

 

Additional Information:

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >