Shib + BMC/Remedy

[Steven Carmody]

Hi,

we're about to embark on Shib-enabling our remedy-based ticketing and 
tracking system. Apparently, this should be pretty straightforward... 
we've got a different BMC product (Atrium SSO), and it looks like it 
will support SAML SSO out of the box. All that's good news.

It looks like we also have approximately 700 groups defined WITHIN 
Remedy; they're used for routing, etc. In addition, the local Remedy 
owner says "Most of these groups are created by the Application and are 
intimately tied to the application access and application roles.". That 
could be scary. But, it turns out that many/most of these groups exactly 
parallel groups that we already have defined within Grouper (and pushed 
to ldap).

I'm wondering if other campuses have already been down this road, and 
have an approach to using groups with Remedy (eg configuring Remedy to 
do SSO with Shib, but then relying on ldap for group memberships).

Thanks in advance !