Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

13
votes
7answers
9k views

Google Apps, AD and SSO

We're a small shop running Google Apps (Enterprise) for our email needs. Love it. Internally, we're using Windows AD (2003). No complaints there either. I'd like to get some method of SSO going ...
12
votes
5answers
5k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
9
votes
7answers
11k views

Can a Linux server serve as a Domain Controller for Windows Machines?

In a small office setup (5-6 employees) we have seven Windows XP and Windows Vista clients, as well as a couple of linux servers. Is it possible to set up a linux machine to act as the domain ...
8
votes
2answers
486 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
7
votes
2answers
2k views

SSO solution and centralized user mgmt for about 10-30 Ubuntu machines?

I'm looking for a clean way to centralize user management. The setup: About 10-30 linux machines (Ubuntu 10.04 LTS server) Maybe 10-30 users for now. The requirements (hopes and expectations): A ...
7
votes
3answers
7k views

Apache mod_auth_kerb and LDAP user groups

I've been considering deploying mod_auth_kerb on our internal web servers to enable SSO. The one obvious problem I can see is that it's an all-or-nothing approach, either all your domain users can ...
7
votes
4answers
9k views

How does SSO using Active Directory works where user is transparently logged in. (intranet webapp)

I'm told that it's possible to make a web application not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able to go to ...
7
votes
3answers
5k views

Single-Signon options for Exchange 2010

We're working on a project to migrate employee email from Unix/open-source (courier IMAP, exim, squirrelmail, etc) to Exchange 2010, and trying to figure out options for single-signon for Outlook Web ...
6
votes
4answers
8k views

Apache Bad Request “Size of a request header field exceeds server limit” with Kerberos SSO

I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine. But when I try to open the website in ...
5
votes
5answers
317 views

Alleviating the Password Explosion Problem

Don't you just hate it when your password explodes, letting the magic smoke out of your server, and setting lp0 ablaze? In all seriousness, the number of places a person needs a username and password ...
4
votes
4answers
676 views

Single sign-on for a mixed-OS network

I am handling a mixed network of SCO Openserver, Slackware and Windows XP computers. Right now, the primary user accounts are kept on one SCO computer with usernames and passwords synchronized to the ...
4
votes
1answer
300 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
4
votes
1answer
987 views

Credentials can not be delegated - Alfresco Share

I've hit a brick wall configuring Alfresco 4.0.d on Redhat 6. I'm using Kerberos authentication, it seems to be working normally, and single sign on is working on the main alfresco app itself. I've ...
4
votes
3answers
4k views

Using ADFS 2.0 for Google apps single sign on

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0. Does this mean that is can be used to authenticate users of ...
4
votes
1answer
187 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
4
votes
1answer
343 views

Intranet corporate SSO for webapps against Active Directory

I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS: Corporate portal (Drupal backend) Project management ...
3
votes
1answer
1k views

Self Signed Certificate - Active Directory - Make it trustable to all users

I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com. This SingleSignOn open source solution uses SAML protocol (i ...
3
votes
2answers
119 views

What is the term for single source authentication that is not Single Sign-On?

I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
3
votes
1answer
554 views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
3
votes
3answers
7k views

Lotus Domino Active Directory Integration - Possible and Practical?

So about 3 months ago I "inherited" a Lotus Domino setup, and quite frankly, it's a mess. Historically, it's had 10 years of the primary focus being on development rather than on management and ...
3
votes
1answer
93 views

Getting started with active directory and cloud services

I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up ...
3
votes
1answer
2k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
2
votes
4answers
126 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
2
votes
1answer
4k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
2
votes
2answers
789 views

Seamless single sign on between Windows and Linux

I have been messing with Services for unix 3.5 for two days now and I am getting nowhere fast. Let me explain our situation. We have several hundreds of Linux servers, and hundreds of windows ...
2
votes
2answers
7k views

Single sign on with Windows 2008 R2 RemoteApps

I've got the following setup: Windows 2008 R2 server: Remote Desktop Services (RemoteApp, Session Host, Services Manager) Windows 2008 R2 server: AD + AD Certificate services + DNS Windows 7 client ...
2
votes
3answers
661 views

SSO “Portal”

Pursuant to my question on alleviating the password explosion, I've contacted some of the services to whom we are paying money to access their websites to ask if we could authenticate our own users, ...
2
votes
2answers
471 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
2
votes
1answer
2k views

SSO with Apache and Kerberos issues

I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately. I have followed this guide to the letter but I ...
2
votes
1answer
225 views

Can a user with a disabled account browse Confluence content anonymously?

I'm running Confluence 3.5.13. I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime. Users with an active account in Confluence are logged in ...
2
votes
1answer
3k views

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active ...
2
votes
0answers
193 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
2
votes
0answers
42 views

Need SSO, RMM w/ Mac client GP management (printers etc) from one web portal [closed]

I have a client that is looking for an all-in-one solution to manage users and computers. Preferable in the cloud or SaaS. They would like to be able to create/delete users from AD, integrate SSO ...
2
votes
0answers
1k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
492 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
2
votes
0answers
521 views

Single Sign On through Citrix

I have a webserver running Windows 2008 R2 with IIS 7. The server is a member of the domain "mydomain.com". What I am trying to achieve is a SSO connection between the AD users and the web server. The ...
1
vote
4answers
7k views

Windows 7 Single Sign On

We run Windows XP, Vista and are now testing Windows 7 in our corporate environment. Thus far all of our Win7 installations have been x64 installs with the same net result that we are having to ...
1
vote
1answer
109 views

Using Kerberos only for SSO

I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD. This works. However, Kerberos seems to feel responsible ...
1
vote
3answers
1k views

Possible to enable ssh passwordless authentication via Windows Active Directory?

Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password? If so, ...
1
vote
2answers
6k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...
1
vote
1answer
4k views

Windows 2008 R2 RDS - Double Login

Issue: Double logins when connecting to RemoteApps or Remote Desktop Environment: Gateway = 1 server 2008 R2 - Roles = Gateway, Session Broker, Connection Mgr, Session Host Configuration server ...
1
vote
1answer
877 views

Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?

OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
1
vote
2answers
208 views

Windows Server 2003 - passwordless access to \\myhost\ but not \\myhost.mydomain.net\

I have a Windows Server 2003 system on which passwordless access to local UNC paths is possible using the server's unqualified hostname or its IP address, but not via its FQDN -- even when the hosts ...
1
vote
1answer
7k views

vCenter 5.1 SSO Configuration option not available in Web Client?

Problem I just finished separately installing vCenter Server 5.1. I installed the components separately but on the same machine using a local SQL 2008 R2 DB (not SQL express). Everything appears to ...
1
vote
1answer
617 views

How to login to VisualSVN Server (with Single Sign-On enabled) under other user than the currently logged one to Windows machine?

If you have Integrated Windows Authentication as the only authentication type enabled in VisualSVN Server you don't get any login / password prompts. You may find yourself stuck and confused if ...
1
vote
1answer
141 views

Innovation: Single sign on integrated with web filter? [closed]

This one is a doozy, so be forewarned! Also please let me know if this isn't on the correct site. What I would like to implement in the form of a server appliance is a single sign on solution that ...
1
vote
1answer
1k views

Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect

I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way # cat .htaccess AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab ...
1
vote
2answers
8k views

SSSD Authentication

I just built a test server running OpenSuSE 12.1 and am trying to learn how configure sssd, but am not sure where to begin to look for why my config cannot allow me to authenticate. server:/etc/sssd ...
1
vote
1answer
459 views

ADFS chained over 2 forests for Single Sign On on Office 365

Is it possible to provide SSO to Office 365 in following Scenario? Windows 2008 Forests Exchange 2010 Hybrid Infrastructure with On Premise and Cloud Users Account Domain -> Account Domain ...
1
vote
1answer
1k views

Set up Jenkins to use Crowd's OpenID for SSO?

Been trying to get Jenkins to work with Crowd's OpenID server so we can use single sign-on like with our Atlassian stuff (the Jenkins Crowd plugin can't do SSO). Can't seem to find the proper OpenID ...