Upgrade an SSO server‌

SSO and smart card limitations and requirements‌

  • The only smart card client reader supported is the Common Access Card (CAC), a United States Department of Defense (DoD) smart card issued as standard identification for logging in to DoD hosted software.

  • SSO and smart card authentication are only supported on Linux and Solaris.

  • After upgrading Dimensions CM configured for SSO with a smart card, your SSO+CAC setup may not work due to the new string encryption mechanism in the updated software version. For details on how to re-enable the CAC authentication, see SSO and smart card tasks.

 Upgrade

  1. Run the server installer. See Run the installer. Read and accept the license agreement.

  2. Select Upgrade.

  3. Accept the directory where CM is already installed or choose a different one.

  4. Select Setup Dimensions SSO.

  5. Select an installation option:

    • Dimensions SSO

    • Dimensions SSO and Smart Cards

  6. Select an SSO server installation option:

    • New: Install a new SSO server.

    • Existing: Configure a connection to an existing SSO server, for example, Solutions Business Manager (SBM).

  7. For an existing SSO server

    Specify the SSO server’s host name and port and optionally select a secure HTTPS connection.

  8. For a new SSO server without smart card

    To configure LDAP details for user credentials, enter parameters for Hostname, Port, Base DN, Search Filter, Bind User DN, and Password.

    Defaults:

    • Port: 389

    • Search Filter: (&(objectClass=user)(sAMAccountName={0}))

    For details about server SSO parameters, see Single sign-on prerequisites‌‌.

  9. For a new SSO server with smart card

    • To configure the LDAP connection for authenticating smart cards, enter parameters for Hostname, Port, Bind User DN, and Password.

      Default port: 389

    • To configure LDAP details for user credentials, enter parameters for Hostname, Port, Base DN, Search Filter, Bind User DN, and Password.

      Search Filter default: (&(objectClass=user)(sAMAccountName={0})).

    For information about server SSO and smart card parameters, see Single sign-on prerequisites‌‌.

  10. Review the settings and click Install.

    When the upgrade is complete, click Finish.

  11. Manually configure the smart card trusted certificate authorities. For details, see Configure trusted certificate authorities.