Configuring SAML SSO for BMC Remedy Force

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and BMC Remedy Force.

Prerequisite

1. Login to ADSelfService Plus as an administrator.
2. Navigate to  Configuration → Self-Service → Password Sync/Single Sign On → Add Application, and select BMC Remedy Force from the applications displayed.
   Note: You can also find BMC Remedy Force application that you need from the search bar located in the left pane or the alphabet wise navigation option in the right pane.
3. Click IdP details in the top-right corner of the screen.
4. In the pop-up that appears, copy the Login URL and download the metadata file by clicking on the Download Metadata.

BMC Remedy Force (Service Provider) configuration steps

1. Login to BMC Remedy Force with an administrator’s credentials.
2. Navigate to Set up → Security Controls → Single sign-on settings
3. Click New from metadata file. You can upload the metadata file in the respective field. (Refer Step 4 of Prerequisite).
4. Rename the Entity ID as "https://saml.remedyforce.com".
5. Click Save.

6. When you enable SAML, a Salesforce Login URL will be displayed. Note down the URL. This will serve as the SAML Redirect URL while configuring BMC Remedy Force with ADSelfService Plus.

   

7. To map SSO Login to login page: 

   1. Navigate to Domain Management → Domain
   2. Edit domain settings.
   3. Enable SSO Configuration and Choose Login Method.
   4. Add the domain created or registered domain.
      Example: https://purebmc.my.salesforce.cpm

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ BMC Remedy Force configuration page.
2. Enter the Application Name and Description.
3. In the Assign Policies field, select the policies for which SSO need to be enabled.
   Note:ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your BCM RemedyForce account. For example, if you use johndoe@bcmremedyforce.com to log in to BCM RemedyForce, then bcmremedyforce.com is the domain name.
6. In the SAML Redirect URL field, enter the URL you had copied in Step 6 of BMC Remedy Force configuration.
7. Enter the Assertion Consumer Service URL provided by your application service provider in the Assertion Consumer Service URL field. If required, click the + button next to the text field to add multiple Assertion Consumer URLs. These values can be found in the application's SSO configuration page or metadata. Please reach out to your application's support team if you are having trouble locating the Assertion Consumer Service URL in your application's user interface or metadata.
8. In the Name ID Format field, choose the format for the user login attribute value specific to the application.

Note: Use Unspecified as the default option if you are unsure about the format of the login attribute value used by the application.

9. Click Add Application