Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

-3
votes
0answers
23 views

How do tech companies with millions of users typically implement identity management? [closed]

Just about every tech company has to manage external user accounts, perform authentication and authorization, and implement SSO if they have multiple domains. For tech companies with millions of ...
0
votes
0answers
13 views

windows single sign on tomcat through IIS Url rewrite

I'm facing a difficult setup where I have to configure single sign on, based on the logged in used on my tomcat application. I already took some steps which allow me to login via single sign on ...
0
votes
0answers
17 views

Kerberos Authenticator Encryption Type NULL

So, I've been working on a SSO enabled XMPP application on our network for a couple weeks. I have 95% of the bugs worked out, and everything is running smoothly. The problem is that I have a couple ...
1
vote
0answers
17 views

Partial content 206 requests on nginx behind WebAuth

I'm having a troubleshooting an issue that I think is likely due to WebAuth authentication when serving .webm videos. The server I have is nginx 1.6.2. I can make 200 GET requests just fine. I also ...
0
votes
1answer
25 views

JBoss - Not working the next day

We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...
0
votes
1answer
130 views

2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400

We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have ...
0
votes
1answer
70 views

Configuring kerberos/ntlm single signon with apache and sssd

What is the proper/cleanest way of setting up apache to support SSO using NTLM, or preferably Kerberos, with CentOS7 running sssd connected to an Active Directory domain controller? With realmd, ...
0
votes
0answers
20 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
1
vote
2answers
36 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
0
votes
1answer
72 views

Redirect https dns entry to adfs relying party

We are on ADFS 3.0. We have a relying party trust setup for SSO to a SaaS solution. We would like to be able to create a DNS entry and have it work so that anytime someone requests this DNS address, ...
0
votes
2answers
123 views

ADFS 2.0 on Windows Server 2012 R2

Wanted to know if ADFS 2.0 can be installed on Windows Server 2012? The below link says it can be installed and gives command to install but that command fails throwing the error ...
0
votes
0answers
96 views

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error ...
8
votes
2answers
484 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
48 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
1
vote
1answer
205 views

problems creating a keytab file on win server

I am trying to create a keytab file. i see a warning WARNING: pType and account type do not match. This might cause problems. The command i use is ktpass -princ ...
0
votes
0answers
66 views

remote_user or php_auth_user missing

I have the following configuration in my apache file. when i log in the REMOTE_USER or PHP_AUTH_USER is missing. My application depends on this. What can i do to make this available? Alias /paradox ...
0
votes
0answers
127 views

Browser (SPNEGO) kerberos authentication on Windows Phone 8 IE

Is there a way to make Internet Explorer on Windows Phone 8 authenticate to a site using Windows Integrated Security Authentication with Kerberos through the Negotiate (SPNEGO) protocol? It seems to ...
0
votes
0answers
62 views

Glassfish-3.0.1 mixing user sessions - SSO

We are experiencing a strange behaviour, we have an application (jsf 2.2.4 embedded) that has a login form, glassfish has sso enabled and a custom realm (LDAP). We have also several applications (some ...
0
votes
0answers
41 views

Login SSO - Access internal and external

I have a intranet login with SSO as follows: <Directory "Myaplication"> None Options AllowOverride All Order allow, deny Allow from all AuthName "intranet" AuthType SSPI ...
0
votes
0answers
135 views

Apache single sign on redirecting to success login page, Django application

All I have a Django web application with relative paths url. For instance, I have www.example.com/inventory/get_item/?item_id=5 In the apache configuration I am using oracle single sign on to ...
0
votes
1answer
70 views

Single sign on and active directory federation

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign on (SSO)? From a simple look at things both seem to do much the same thing in ...
1
vote
0answers
222 views

vSphere 5.1 SSO upgrade issue

I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365. First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails ...
0
votes
1answer
783 views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
-1
votes
1answer
86 views

set SAML request for Office 365 Single Sign On

i am trying to set up single sign on for office 365 for my domain using my own identity provider. i have configured the domain to get to the login page of my identity provider whenever a user types in ...
1
vote
0answers
85 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
0
votes
0answers
107 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
1
vote
0answers
343 views

Windows SSO-Login only working once in Internet Explorer 11

We're about to migrate our users from Internet Explorer 8 to version 11. While testing the IIS-Windows-Authentication, I noticed that it does work, but it will only work once. I can press the ...
1
vote
1answer
737 views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
2
votes
2answers
463 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
1
vote
0answers
129 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
0
votes
2answers
276 views

apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate

i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO ...
1
vote
1answer
232 views

Apache authenticate against AD - some use DOMAIN\\username, others username

I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind. Here's the relevant portion of the apache2 configuration: ...
4
votes
1answer
179 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
0
votes
1answer
23 views

Apache SSO for a service that runs as local user

I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app. I have successfully joined the domain, and can ...
0
votes
3answers
461 views

REMOTE_USER variable without @DOMAIN suffix

I administer an application that enables single sign on with valid AD users and runs on IIS currently. For performance increase, I have a task to migrate the web layer to Apache/Php on Linux. I have ...
1
vote
1answer
511 views

ADFS 2.0 Best Practices

I'm having a hard time finding some good articles on best practices for ADFS. We are looking to implement SSO for less than 200 users. We plan on setting up a federated server farm (2 servers) ...
0
votes
0answers
48 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
2
votes
0answers
192 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
-1
votes
1answer
144 views

How to integrate Question2Answer into Typo3?

Question2Answer provides the option to implement Single Sign On. I want to integrate it into an existing installation of Typo3 (for Typo3 front end users). The questions I have: Do I need a certain ...
1
vote
1answer
509 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
0answers
138 views

Generating XML SAML with signature using xmlsec1

I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl. Next ...
1
vote
0answers
25 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
2
votes
0answers
42 views

Need SSO, RMM w/ Mac client GP management (printers etc) from one web portal [closed]

I have a client that is looking for an all-in-one solution to manage users and computers. Preferable in the cloud or SaaS. They would like to be able to create/delete users from AD, integrate SSO ...
3
votes
1answer
539 views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
0
votes
1answer
32 views

Single sign-on between two UAG servers

The situation: site1.company.com is published in UAG 1 (Datacenter 1) site2.company.com is published in UAG 2 (Datacenter 2) My question: Is it at all possible to set up a single sign on between ...
0
votes
1answer
572 views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
1answer
2k views

Upgrade vCenter 5.1 to 5.5 error 29102

I'm upgrading vCenter 5.1 to 5.5. After successful upgrading of Single Sign-On service, in the next step of upgrading Web Client when it needs Single Sign-On password and Lookup Service Url it used ...
1
vote
1answer
109 views

Using Kerberos only for SSO

I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD. This works. However, Kerberos seems to feel responsible ...
1
vote
1answer
683 views

Bad SAML Request

I'm trying to setup a web SAML login on Domino server. I received the SAML 2.0 metadata XML file from the identity provider which is Oracle Identity Federation 11g. I imported the metadata to a IdP ...
0
votes
1answer
115 views

Unable to disable Kerberos Single Sign On (SSO)

I've been exploring Kerberos Single Sign On (SSO) to replace NTLM for a Web Application hosted internally within a Windows Domain. After creating Service Principal Names (SPN) for a test service ...