How to configure SSO for Control-M web interfaces using Apache HTTP proxy server to authenticated with OKTA

Knowledge Article

Article Number

000226148

Old Article Number

000171811

Article Type

FAQ/Procedural

Title

How to configure SSO for Control-M web interfaces using Apache HTTP proxy server to authenticated with OKTA

Summary

Procedure to setup Reverse Proxy to authenticate Control-M Wen clients with OKTA

Product

Control-M/Enterprise Manager

Component

Control-M/Enterprise Manager

Applies to

Control-M Enterprise Manager versions 9.0.20 and 9.0.19

Question

What are the steps to install and configure Apache web server as a Reverse Proxy in order to enable OKTA SSO integration with Control-M web ui

Answer

NOTE: Control-M 9.0.21 now comes with full IdP integration which makes implementing this much easier and is far simpler to maintain. It is highly recommended to upgrade to version 9.0.21 first, and then configure Identity Provider integration.

The configuration to support OKTA with Control-M Web client 9.0.20 and older is to install Apache Web Server as a Reverse Proxy and route all the requests to Control-M Tomcat server.
OKTA does not provide a Value for Tomcat and Filter is not supported.
The whitepaper attached provides step by step procedure for configuring the Apache Web Server as a Reverse Proxy and configuring SSO authentication with OKTA for Control-M web clients of version 9.0.20 and older.

Sample configuration files are provided in SSO.zip

Additional Information:
Customers viewing this solution may find value in the following self-help Connect with Control-M video.

Attachment(s):

SSO.zip
Control-M Integration with SSO.pdf