As it stands today the fortify SSO toggle does not accomplish anything and provides consumers of our product a false sense of hope. The value in question. We need to smooth the process for our consumers by implementing an easy way to integrate fortify with keycloak for SSO authentication.
A possible solution could be leveraging autoconfig parameters in Fortify SSC, however this may require a license for it to work. The current helm chart does not leverage the SSO toggle so we may also need to write a helper to forward the values into the chart, provided it is possible to set these parameters via helm.
I have reached out to Opentext to see if SSO configuration via config files are a possibility. The helm chart also does not offer any way to configure SSO. If they do not offer a programatic way to configure SSO, then it may not be possible to serve the feature via SSO toggle.
It seems that the current Fortify SSO toggle code in BB is just a stub that doesn't interact with anything.
I received notice that the enhancement request was received by the Opentext development team, and they will decide whether or not this feature will be implemented in the future. I asked if they could keep us in the loop on the outcome of their decision.
I have received additional correspondence from Opentext support:
Hello BrettYou are very welcome. Unfortunately, since our development team is internal, it can be only accessible from our team.In average, this decision could take weeks or months. However, I receive notifications for every ticket we have with development.So, I will keep you updated as soon as I receive any news from them, and I also recommend you do a follow-up once every two or three months to check the status of the ticket.You can just email me, or open a ticket with support.Now, I will proceed to close this support ticket.Please feel free to reply to this email if you are having issues accessing the new Fortify Support portal to update this case. Don't update the subject or email body as there is a reference id to update the case directly in the new system.Kind regards,Jose Serrano BrenesCustomer Support Engineerjserrano2@opentext.com