RDKM Managed Applications Migration

Upcoming Migration from LDAP to SSO Authentication for RDKM Managed Applications

Dear RDK Community Members,

We want to inform you about an important upcoming change: we will be migrating from LDAP authentication to Single Sign-On (SSO) for all RDKM Managed applications, including:

By the end of December 2024, all RDKM members will need to use SSO authentication to access these applications. This migration will introduce email-based authentication, meaning custom usernames will no longer be used. Instead, your email address used for registering RDKCentral account will serve as your login identifier.

We plan to execute a staged rollout, where each application will transition from LDAP to SSO authentication on a biweekly basis. During this period, it is important for all members to start using SSO, as LDAP authentication will be phased out once the migration is complete.

As we approach the migration date, we will provide detailed instructions to ensure a smooth transition. Please stay tuned for further updates and steps to take.

Thank you for your cooperation and support as we make this enhancement to our authentication process

What is SSO ?

It's an authentication process that allows a user to access multiple applications or services with one set of login credentials. Instead of remembering different usernames and passwords for each service, users log in once and gain access to all interconnected systems.

This improves user convenience and enhances security by reducing the number of passwords that need to be managed. SSO is commonly used in enterprise environments for secure application authentication

Phase-1: Date: 09-Nov-2024

Phase-2: Date: 23-Nov-2024

For more info and queries, please refer the below FAQs.

Migration will happen in two phases. First phase will happen on Nov 9th and second phase will happen on Nov 23rd. First phase will cover only RDK Wiki and Jira applications. Second phase will cover the rest of the applications like CMF, Artifactory and Jenkins.

In Phase 1 of the migration, only Jira and Wiki will transition to SSO. Starting November 9th, when you access Jira or Wiki, you'll be required to set up an new password and enable MFA.

For other applications, including CMF, Jenkins, and Artifactory, you will still use your LDAP password until Phase 2, which is scheduled for completion by November 23rd

No worries—we’ll notify all existing users! After the SSO migration, we will send an email with a link to set up your password and MFA. Detailed steps on how to complete the setup will be available in the following questions.

Yes, you’ll need an authenticator app on your mobile device. If you already have an app like Microsoft Authenticator or Google Authenticator, you can use it—there’s no need to install a new one. If you don’t have an authenticator app yet, simply download one of the commonly used options, such as Microsoft Authenticator or Google Authenticator, to get started.

The current RDK Central user account has been onboarded at okta platform by the RDK Central admin. The user will receive an activation email with a link, which will expire in 7 days.

Click on Activate RDKM SSO Account. It will redirect to page to setup the password.

Click on setup to set your password as per the requirements.

Click on Next. It will redirect to setup security method for MFA.

Click on first option - Bring your own Authenticator App
Click on setup.

Scan the barcode and enter the code from the Authenticator app.

Once setup, click Continue

It will redirect to the login page. Click on Login.
Select Option as RDKM SSO.

Now you will be logged in to the wiki application.

Go to https://wiki.rdkcentral.com/signup.action for signup.

Click on Signup button. It will redirect to the CLA agreement page as below

Once clicked on proceed, we will receive a mail for activation.

Click on Activate RDKM SSO Account. It will redirect to page to setup the password.

Click on setup to set your password as per the requirements.

Click on Next. It will redirect to setup security method for MFA.

Click on first option - Bring your own Authenticator App
Click on setup.

Scan the barcode and enter the code from the Authenticator app.

Once setup, click Continue

It will redirect to the login page. Click on Login.
Select Option as RDKM SSO.

Now you will be logged in to the wiki application.

Click on Reset password link https://wiki.rdkcentral.com/forgotuserpassword.action
We will receive a mail as below

Reset the password as below following the password requirements

Once reset, you will be able to login to wiki.

You will receive a mail also stating that your password was reset.

As we are migrating to Okta, we cannot transfer the encrypted passwords of existing users from LDAP to Okta. Therefore, existing users will need to create a new password in Okta. Please follow the instructions above on "How to reset your password via Okta".

Yes, It is mandatory to set new password in Okta as Okta does not recognise existing LDAP password. Please follow the above queries for setting up a new password in Okta.

Yes, It is mandatory to set MFA in Okta as we are migrating from the LDAP based login to Okta. Please follow the above queries on how to setup MFA in Okta.

Newly signed up users should create their LDAP password to access the below RDK LDAP Based Applications.

RDK Code
RDK Artifactory
RDK Jenkins
Click on https://wiki.rdkcentral.com/forgotuserpassword-ldap.action link and provide the RDK Central account details.
You should have received an email once click on "Send it to me"
You can find Reset Password link in your mail inbox.
Once you click on link, You will be redirected to set new password. Set the new password and confirm password.
If you don't find the Captcha, Please click on reload button next to Captcha, get loaded new Captcha.
Once you click on reset, Your password will set successfully.
You can use the newly set password for connecting the RDK Applications which are still running LDAP based authentication.
RDK Code
RDK Artifactory
RDK Jenkins