Administer > Use Single Sign-On (SSO) with NNMi > Enabling SSO for NNMi Management Servers Located in Different Domains

Enabling SSO for NNMi Management Servers Located in Different Domains

You can configure two or more NNMi management servers for SSO. This example explains how to configure SSO for three NNMi management servers located in different domains. If you must configure two or more NNMi management servers for SSO and these systems reside in different domains, complete the following steps:

Note When making file changes under High Availability (HA), you must make the changes on both nodes in the cluster. If the change requires you to stop and restart the NNMi management server, you must put the nodes in maintenance mode before running the ovstop and ovstart commands. See Maintenance Mode for more information.

  1. Open the following file:

    • Windows: %NNM_PROPS%\nms-ui.properties
    • Linux: $NNM_PROPS/nms-ui.properties
  2. Look for a section in the file that resembles the following:

    com.hp.nms.ui.sso.isEnabled = false

    Change this as follows:

    com.hp.nms.ui.sso.isEnabled = true
  3. Look for a section in the file that resembles the following:

    com.hp.nms.ui.sso.domain = group1.mycompany.com

    Make sure the domain name contains at least one dot.

  4. Look for a section in the file that resembles the following:

    com.hp.nms.ui.sso.protectedDomains=group1.mycompany.com

    Change this as follows:

    com.hp.nms.ui.sso.protectedDomains=group1.mycompany.com, group2.yourcompany.com, group3.yourcompany.com
  5. Look for a section in the file that resembles the following:

    com.hp.nms.ui.sso.initString =Initialization String

    NNMi management servers must share the same initialization string to work in an SSO configuration. Change the initialization string the same value on all NNMi management servers included in the SSO configuration.

  6. Run the following command to commit the changes:

    nnmsso.ovpl -reload

    See the nnmsso.ovpl reference page, or the Linux manpage, for more information.

  7. Repeat step 1 through step 6 two more times, configuring the remaining two NNMi management servers. For each remaining NNMi management server, substitute group2 or group3 for group1 during step 3.