Clarity

-----------------------------

Application Manager - Application Access Denied [x].

USER_X is not authorized to execute SET.

-----------------------------

CA PPM Interface [x]
CMN-10011: Please enter a valid User Name and Password.

----------------------------

Hello All,

A user from cross domain, using Internet Explorer, is able to connect to  Clarity Server via SSO.

The same user using MS Project interface, is not able to connect to access project data.

The users on cross domain are on Citrix.

Can we force the scheduler entry URL to be access via SSO?

Any suggestion please?

Thank you.

MJ

Hi MJ,

If you open MS Project from PPM (Home->Projects->Open in Scheduler), you will be able to access project data.

I think that you encounter the issue when access PPM projects via MS Project directly.

I experienced similar situation with Open Workbench in SSO environment.

This maybe same as MS Project.

Check the "External Authentication" checkbox on Administration->Resources->Resource Properties.

If it is turned on, you will need to use SSO password as Open Workbench password.(MS Project)

If it is turned off, you will need to use PPM password as Open Workbench password.(MS Project)

On SSO environment, user does not know his PPM password because it is not required to login PPM.

Regards,

Shoichi

I understand that the Scheduler entry does not go through SSO.

If a user has an external authentication box checked, that its scheduler entry credentials will be authenticated by LDAP (not SSO).

We have two domains - say Domain A  and Domain C.

Clarity App server runs in Domain C

All users on Domain C can access PPM though Web Browsers and through MSP alright - no issues.

Users on Domain A can access PPM only through Web Browsers. but not using MSP.

Domain A users are on Citrix environment, where Internet Explorer and MSP are available in different shells, therefore the users cannot open the project using "Open in Scheduler" .

Hence I launch MSP and provide the credentials in the Setup window.

Hi MJ,

I think that MSP, OWB and XOG do not go through SSO.

I think they are not supported by SSO so far.

Regards,

Shoichi

That's correct.

This link can be useful when using client applications if environment uses SSO as well:

CA Clarity Tuesday Tip:  XOG, OWB, and MSP login failures with SSO 

Regards,

Marc

There are two separate directory servers for Domain A and Domain C users.

This article still does not help, I do not know how siteminder works, i.e. how it can authenticate users from Domain A and Domain C on two separate set of directories.

Clarity CSA allows connection to only one directory server (Domain C).

When a user from Domain A uses MSP to connect to Clarity, that user gets the error given in the start of this thread.

Any suggestion please?

Thanks and regards,

MJ