Install Application Single Sign-On

This topic tells you how to install Application Single Sign-On for VMware Tanzu (commonly called AppSSO) from the Tanzu Application Platform (commonly called TAP) package repository.

Note

Follow the steps in this topic if you do not want to use a profile to install Application Single Sign-On. For more information about profiles, see Components and installation profiles.

What’s inside

The AppSSO package installs the following resources:

• The appsso namespace with a deployment of the AppSSO controller and services for webhooks.
• RBAC
• APIs

Prerequisites

Before installing Application Single Sign-On, ensure that you have Tanzu Application Platform installed on your Kubernetes cluster.

The sso.apps.tanzu.vmware.com package has these dependencies:

• cert-manager.tanzu.vmware.com: Required at installation time and runtime. For more information see, Install cert-manager.

• crossplane.tanzu.vmware.com: Required at installation time and runtime. For more information see, Install Crossplane.

• service-bindings.tanzu.vmware.com: Required at runtime. For more information see, Install Service Bindings.

Important

Installation time dependencies must be present on the cluster at the time the Application Single Sign-On package is being applied.

Runtime dependencies don’t have to be present when the Application Single Sign-On package is being applied, but they are required eventually for it to function fully.

Install Application Single Sign-On for VMware Tanzu

1. Learn more about the AppSSO package by running:

   tanzu package available get sso.apps.tanzu.vmware.com --namespace tap-install
   

2. Install the AppSSO package by running:

   tanzu package install appsso \
    --namespace tap-install \
    --package sso.apps.tanzu.vmware.com \
    --version 4.0
   

3. Confirm the package has reconciled by running:

   tanzu package installed get appsso --namespace tap-install
   

See also

• To configure the Application Single Sign-On package to meet your needs, see Package configuration for Application Single Sign-On.

• To upgrade to a later version of the package, see Upgrade Application Single Sign-On.

• When deployed on an OpenShift cluster, additional OpenShift-specific resources are installed. For more information, see Application Single Sign-On for OpenShift clusters.