In CP4BA 21.0.3, if deploying with the CP4A deployment context (i.e. shared_configuration.sc_deployment_context: CP4A), then IAM/Zen authentication is enabled by default. In this case, IAM must be used for authentication. IAM allows you to configure LDAP based user registries as well as SAML for SSO (https://www.ibm.com/docs/en/cloud-paks/1.0?topic=users-configuring-single-sign). However, it currently does not support configuring OIDC identity providers for SSO.
If you deploy FNCM standalone via
- shared_configuration.sc_deployment_context: FNCM
- shared_configuration.sc_deployment_patterns: content
Then IAM/Zen is disabled by default. So you are free to choose the OIDC identity provider you have used in past releases.
------------------------------
ROGER Bacalzo
------------------------------
Original Message:
Sent: Tue December 28, 2021 03:24 AM
From: Basak Yazirli
Subject: Enabling SSO for Filenet which is running on OCP
As far as I know, SSO integration structure is completely different in CP4BA 21.0.3 version.
I am looking for a guide to enable SSO for Filenet which is running on OCP. Do you have any reference for this or
is there anyone who can enable SSO for Filenet is running on OCP?
------------------------------
Basak Yazirli
------------------------------