{"id":1147,"date":"2020-09-14T19:47:53","date_gmt":"2020-09-14T19:47:53","guid":{"rendered":"http:\/\/172.23.1.43\/?p=1147"},"modified":"2022-06-07T22:28:14","modified_gmt":"2022-06-07T22:28:14","slug":"add-vrealize-operation-manager-in-the-ws1-app-catalog","status":"publish","type":"post","link":"https:\/\/blog.n-dol.org\/2020\/09\/14\/add-vrealize-operation-manager-in-the-ws1-app-catalog\/","title":{"rendered":"Add vRealize Operation Manager in the WS1 App Catalog"},"content":{"rendered":"\n

When you integrate vRealize with WS1 Access, users are going to be authenticated using the OAuth method. the problem is that the application won’t appear in the application catalogue, administrator will need to go to the vROps login page and then select the right identity then click on Redirect as show below.<\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Get Application Information<\/h2>\n\n\n\n

To add the application in the application catalog you need to first get the information of the oauth client<\/p>\n\n\n\n

Go to Catalog<\/strong> > Settings<\/strong> > Remote<\/strong> App Access<\/strong><\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Select the OAuth client corresponding to vROps, you can see if it’s the right one by looking at the Redirect URI<\/strong><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Take note of the following: Client ID<\/strong> and the Redirect URI<\/strong><\/p>\n\n\n\n

You also need to get the information from vROps on how the integration have been done.<\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Build the URL<\/h2>\n\n\n\n

The url is as follow:<\/p>\n\n\n\n

https:\/\/ACCESSHOST<\/strong>\/acs\/t\/TENANT<\/strong>\/authorize?response_type=code&client_id=CLIENTID<\/strong>&redirect_uri=https%3A%2F%2FREDIRECTURI<\/strong>%2Fui%2FvidmClient%2Fvidm%2F&param0=acs&param1=TENANT<\/strong>&param2=authorize<\/p>\n\n\n\n

So from the information above my url is going to be:
https:\/\/demo.vmwareidentity.eu<\/span>\/acs\/t\/DEMO<\/span>\/authorize?response_type=code&client_id=62180524-b4e5-48e4-80dd-13c92658c88a<\/span>&redirect_uri=https%3A%2F%2Fvrops.domain.tld<\/span>%2Fui%2FvidmClient%2Fvidm%2F&param0=acs&param1=DEMO<\/span>&param2=authorize<\/p>\n\n\n\n

Add the vROps as Web Link<\/h2>\n\n\n\n

Next step is to add vROps as a Web Link in the application catalog.<\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Paste the URL build before<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Save and assign the right population of users.<\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Now the app is available directly in the application catalog for admin\/users to use. Perfect for user with limited access which might not know the url by heart.<\/p>\n\n\n

\n
\"\"<\/a><\/figure><\/div>\n\n\n

Caveat<\/h2>\n\n\n\n

One of the caveat of this method is that the authentication policy is one for the portal as it is a web link there is no step up possible or specific policy for the application.
The other one is that the URL might change if vROps configuration changes the link will need to be updated and as this is not part of the default install might be forgotten.<\/p>\n","protected":false},"excerpt":{"rendered":"

When you integrate vRealize with WS1 Access, users are going to be authenticated using the OAuth method. the problem is…<\/p>\n","protected":false},"author":5614970,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2157457,6054654,38600],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/posts\/1147"}],"collection":[{"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/users\/5614970"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/comments?post=1147"}],"version-history":[{"count":24,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/posts\/1147\/revisions"}],"predecessor-version":[{"id":1421,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/posts\/1147\/revisions\/1421"}],"wp:attachment":[{"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/media?parent=1147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/categories?post=1147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.n-dol.org\/wp-json\/wp\/v2\/tags?post=1147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}