Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

4
votes
1answer
317 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
4
votes
1answer
389 views

Intranet corporate SSO for webapps against Active Directory

I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS: Corporate portal (Drupal backend) Project management ...
1
vote
1answer
28 views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
1
vote
1answer
1k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
1
vote
1answer
819 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
1answer
112 views

Can you recommend a robust OpenAPI 2.0 provider?

Help me find a robust OpenID 2.0 provider! We're looking at various SSO solutions for our organization, and I would like to suggest OpenID as a viable option, since (a) there is good consumer support ...
0
votes
1answer
40 views

Reverse Proxy single sign-on

I have a reverse proxy handling ssl termination and mod_security. The issue is after sso reaches the backend server it tries to authenticate with cas directly instead of the through the proxy still, ...
0
votes
1answer
40 views

Kerberos SSO virtualhost different domain

I have a running centos6.6 server who authenticates against a windows 2008 AD with realm EXAMPLE.LOCAL. I have successfully configured an apache webserver for authentication through kerberos keytab ...
0
votes
1answer
179 views

php REMOTE_USER variable

I am trying to setup mediawiki with SSO. I was able to set up authentification with domain, but I cannot setup SSO. For some reason, $_SERVER['REMOTE_USER'] variable is not set. I looked into some ...
0
votes
1answer
92 views

Have ADFS 2 Prompt for Username Password

Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
0
votes
1answer
110 views

ADFS only allows local browsers and Safari on one Mac to access the verification webpage

So I've setup a Windows 2012 R2 box with AD DS, SQL Server, and AD FS so one of our developers can test out SSO. The problem is, the test webpage, https:///adfs/ls/idpinitiatedsignon, only works ...
3
votes
0answers
49 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
2
votes
0answers
264 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
502 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
2
votes
0answers
547 views

Single Sign On through Citrix

I have a webserver running Windows 2008 R2 with IIS 7. The server is a member of the domain "mydomain.com". What I am trying to achieve is a SSO connection between the AD users and the web server. The ...
1
vote
0answers
120 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
1
vote
0answers
24 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
1
vote
0answers
72 views

JBoss SPNEGO Authentication Renewing Server Kerberos Tickets

We have successfully configured SPNEGO with our webapp on JBoss EAP 6.2, Windows Server 2008, and IE10 using JBoss Negotiation. What is best operational practice for renewing the ticket issued to ...
1
vote
0answers
102 views

Partial content 206 requests on nginx behind WebAuth

I'm having a troubleshooting an issue that I think is likely due to WebAuth authentication when serving .webm videos. The server I have is nginx 1.6.2. I can make 200 GET requests just fine. I also ...
1
vote
0answers
347 views

vSphere 5.1 SSO upgrade issue

I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365. First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails ...
1
vote
0answers
136 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
0answers
595 views

Windows SSO-Login only working once in Internet Explorer 11

We're about to migrate our users from Internet Explorer 8 to version 11. While testing the IIS-Windows-Authentication, I noticed that it does work, but it will only work once. I can press the ...
1
vote
0answers
166 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
1
vote
0answers
29 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
1
vote
0answers
2k views

Server not found in Kerberos database while getting credentials for imap

When running kvno imap/prueba-mail.ejemplo.org@EJEMPLO.ORG get the following error: kvno: Server not found in Kerberos database while getting credentials for imap/prueba-mail.ejemplo.org@EJEMPLO.ORG ...
1
vote
0answers
1k views

Using SAML authentication within nginx

I want to restrict access to some static content, served using nginx, using an existing SAML 2.0 IdP. (In Apache, this would be done with a module such as mod_mellon or mod_auth_saml) What is the ...
1
vote
0answers
491 views

Reverse proxy with single sign-on and backend authentication modules

Has anyone got any recommendations for reverse proxy software that provides a single sign-on interface to multiple backend websites via various authentication mechanisms? e.g. Login to the frontend ...
1
vote
0answers
316 views

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
0
votes
0answers
10 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant ...
0
votes
0answers
5 views

SAML/OpenID authentication on Docker/Core OS

I have a set of servers running Core OS/Docker/Docker Swarm. I have my users in a SAML/OpenID SSO server. I want these users to be able to run Docker containers on my Core OS cluster. How do I ...
0
votes
0answers
13 views

Apache SSO (mod_sspi)

I am trying to implement an auto login function into my mediawiki by using their windows credentials. I am using Apache Server (V2.2). I have implemented the Auth remoteuser extension and has ...
0
votes
0answers
7 views

Apache2.2 Mod:mod_auth_sspi with cross domain

I've setup Apache 2.2 with mod_auth_sspi 1.0.4 on Windows Server 2012 R2 and try to authenticate on our PHP website from the server in domainA to the domain controller in domainB. This is the sspi ...
0
votes
0answers
32 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
0answers
33 views

OpenAM 12.0 IDP SOAP based SLO not working on https

I am trying to configure OpenAM with my own certificate having alias other than "test" as per the document http://docs.forgerock.org/en/openam/12.0.0/admin-guide/index/chap-certs-keystores.html over ...
0
votes
0answers
99 views

IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly on Cognos BI 10.2.1

I am running IBM Cognos Business Intelligence Server 10.2.1 (no other extra software products) on WebSphere Application Server 7, both softwares on an AIX server. I am trying to configure LTPA SSO ...
0
votes
0answers
199 views

How do I configure Azure Active Directory to provide Windows Authentication in multi-tenant IIS ASP.NET web apps?

I have been doing some tests with Azure Active Directory trial license in my data center. Our company has our own hosting services and physical hardware, and for now we would like to keep it that way ...
0
votes
0answers
9 views

VCenter and SSO Database

We are using external dedicated Database Server During VCenter SSO installation RSA Database got created using the script (RSA_DATA.mdf,RSA_INDEX.ndf,translog.ldf)and pointed the SSO to it Now During ...
0
votes
0answers
60 views

Weblogic SSO and IIS Windows Authentication

I have a windows 2008 server running both IIS and weblogic server 12c. I have a java application on the box that needs to run under the weblogic server and several ASP.NET applications that need to ...
0
votes
0answers
70 views

windows single sign on tomcat through IIS Url rewrite

I'm facing a difficult setup where I have to configure single sign on, based on the logged in used on my tomcat application. I already took some steps which allow me to login via single sign on ...
0
votes
0answers
42 views

Kerberos Authenticator Encryption Type NULL

So, I've been working on a SSO enabled XMPP application on our network for a couple weeks. I have 95% of the bugs worked out, and everything is running smoothly. The problem is that I have a couple ...
0
votes
0answers
45 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
0
votes
0answers
222 views

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error ...
0
votes
0answers
201 views

remote_user or php_auth_user missing

I have the following configuration in my apache file. when i log in the REMOTE_USER or PHP_AUTH_USER is missing. My application depends on this. What can i do to make this available? Alias /paradox ...
0
votes
0answers
180 views

Browser (SPNEGO) kerberos authentication on Windows Phone 8 IE

Is there a way to make Internet Explorer on Windows Phone 8 authenticate to a site using Windows Integrated Security Authentication with Kerberos through the Negotiate (SPNEGO) protocol? It seems to ...
0
votes
0answers
116 views

Glassfish-3.0.1 mixing user sessions - SSO

We are experiencing a strange behaviour, we have an application (jsf 2.2.4 embedded) that has a login form, glassfish has sso enabled and a custom realm (LDAP). We have also several applications (some ...
0
votes
0answers
53 views

Login SSO - Access internal and external

I have a intranet login with SSO as follows: <Directory "Myaplication"> None Options AllowOverride All Order allow, deny Allow from all AuthName "intranet" AuthType SSPI ...
0
votes
0answers
198 views

Apache single sign on redirecting to success login page, Django application

All I have a Django web application with relative paths url. For instance, I have www.example.com/inventory/get_item/?item_id=5 In the apache configuration I am using oracle single sign on to ...
0
votes
0answers
65 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
0answers
187 views

Generating XML SAML with signature using xmlsec1

I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl. Next ...