Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

21
votes
6answers
43k views

Google Chrome: passthrough Windows authentication

The I.T. dept is considering allowing installation and automated deployment of Google Chrome browser to 100+ desktops. One of the requirements is for domain credentials to be passed through. The ...
14
votes
7answers
10k views

Google Apps, AD and SSO

We're a small shop running Google Apps (Enterprise) for our email needs. Love it. Internally, we're using Windows AD (2003). No complaints there either. I'd like to get some method of SSO going ...
13
votes
5answers
6k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
12
votes
4answers
17k views

How does SSO with Active Directory work whereby users are transparently logged in to an intranet web app?

I'm told that it's possible to make a web application that does not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able ...
9
votes
7answers
12k views

Can a Linux server serve as a Domain Controller for Windows Machines?

In a small office setup (5-6 employees) we have seven Windows XP and Windows Vista clients, as well as a couple of linux servers. Is it possible to set up a linux machine to act as the domain ...
9
votes
3answers
8k views

Apache mod_auth_kerb and LDAP user groups

I've been considering deploying mod_auth_kerb on our internal web servers to enable SSO. The one obvious problem I can see is that it's an all-or-nothing approach, either all your domain users can ...
8
votes
2answers
679 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
7
votes
2answers
2k views

SSO solution and centralized user mgmt for about 10-30 Ubuntu machines?

I'm looking for a clean way to centralize user management. The setup: About 10-30 linux machines (Ubuntu 10.04 LTS server) Maybe 10-30 users for now. The requirements (hopes and expectations): A ...
7
votes
4answers
12k views

Apache Bad Request “Size of a request header field exceeds server limit” with Kerberos SSO

I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine. But when I try to open the website in ...
7
votes
3answers
5k views

Single-Signon options for Exchange 2010

We're working on a project to migrate employee email from Unix/open-source (courier IMAP, exim, squirrelmail, etc) to Exchange 2010, and trying to figure out options for single-signon for Outlook Web ...
5
votes
1answer
1k views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
5
votes
5answers
322 views

Alleviating the Password Explosion Problem

Don't you just hate it when your password explodes, letting the magic smoke out of your server, and setting lp0 ablaze? In all seriousness, the number of places a person needs a username and password ...
4
votes
4answers
687 views

Single sign-on for a mixed-OS network

I am handling a mixed network of SCO Openserver, Slackware and Windows XP computers. Right now, the primary user accounts are kept on one SCO computer with usernames and passwords synchronized to the ...
4
votes
1answer
378 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
4
votes
1answer
1k views

Credentials can not be delegated - Alfresco Share

I've hit a brick wall configuring Alfresco 4.0.d on Redhat 6. I'm using Kerberos authentication, it seems to be working normally, and single sign on is working on the main alfresco app itself. I've ...
4
votes
2answers
4k views

Using ADFS 2.0 for Google apps single sign on

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0. Does this mean that is can be used to authenticate users of ...
4
votes
0answers
79 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
4
votes
1answer
331 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
4
votes
1answer
397 views

Intranet corporate SSO for webapps against Active Directory

I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS: Corporate portal (Drupal backend) Project management ...
3
votes
1answer
1k views

Self Signed Certificate - Active Directory - Make it trustable to all users

I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com. This SingleSignOn open source solution uses SAML protocol (i ...
3
votes
2answers
131 views

What is the term for single source authentication that is not Single Sign-On?

I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
3
votes
1answer
7k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
3
votes
3answers
7k views

Lotus Domino Active Directory Integration - Possible and Practical?

So about 3 months ago I "inherited" a Lotus Domino setup, and quite frankly, it's a mess. Historically, it's had 10 years of the primary focus being on development rather than on management and ...
3
votes
2answers
577 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
3
votes
2answers
1k views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
3
votes
1answer
146 views

Getting started with active directory and cloud services

I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up ...
3
votes
1answer
4k views

SSO with Apache and Kerberos issues

I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately. I have followed this guide to the letter but I ...
3
votes
1answer
254 views

Can a user with a disabled account browse Confluence content anonymously?

I'm running Confluence 3.5.13. I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime. Users with an active account in Confluence are logged in ...
3
votes
1answer
2k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
3
votes
0answers
17 views

Possible to import Office365 users into local active directory domain? [duplicate]

My company has an office365 setup for all employees. We also have just implemented a domain controller locally which we want to use to authenticate a few things here in the office. The problem is that ...
2
votes
4answers
127 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
2
votes
3answers
1k views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
2
votes
2answers
956 views

Seamless single sign on between Windows and Linux

I have been messing with Services for unix 3.5 for two days now and I am getting nowhere fast. Let me explain our situation. We have several hundreds of Linux servers, and hundreds of windows ...
2
votes
1answer
71 views

vSphere/vCenter not offering SSO options

We started setting up a vSphere infrastructure and want to use OpenLDAP as authentication source. In the vCenter, we have enabled the embedded SSO server and I find options to connect to Active ...
2
votes
1answer
2k views

Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect

I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way # cat .htaccess AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab ...
2
votes
2answers
10k views

SSSD Authentication

I just built a test server running OpenSuSE 12.1 and am trying to learn how configure sssd, but am not sure where to begin to look for why my config cannot allow me to authenticate. server:/etc/sssd ...
2
votes
1answer
77 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
2
votes
1answer
1k views

problems creating a keytab file on win server

I am trying to create a keytab file. i see a warning WARNING: pType and account type do not match. This might cause problems. The command i use is ktpass -princ ...
2
votes
2answers
7k views

Single sign on with Windows 2008 R2 RemoteApps

I've got the following setup: Windows 2008 R2 server: Remote Desktop Services (RemoteApp, Session Host, Services Manager) Windows 2008 R2 server: AD + AD Certificate services + DNS Windows 7 client ...
2
votes
6answers
2k views

SFTP server solution with AD Single Sign-on capabilities

I'm designing a windows client application that will retrieve files from an SFTP server. I would like to avoid forcing users to supply credentials on the client application - rather, their Windows ...
2
votes
3answers
669 views

SSO “Portal”

Pursuant to my question on alleviating the password explosion, I've contacted some of the services to whom we are paying money to access their websites to ask if we could authenticate our own users, ...
2
votes
1answer
161 views

Office 365 with Azure AD - can I allow SSO for another 3rd party SAML app externally?

I'm shooting a little blind here in that I'm not an Azure expert and don't really mess with it yet beyond O365 and DirSync. We have a 3rd party app written in Ruby on Rails that they are saying is ...
2
votes
1answer
4k views

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active ...
2
votes
2answers
109 views

IBM WebSphere Application Server SSO does not set REMOTE_USER on Cognos BI 10.2.2

Very similar issue was posted here, I do not believe they are the same. IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly We are running IBM Cognos Business Intelligence Server ...
2
votes
2answers
146 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
2
votes
0answers
271 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
2
votes
0answers
48 views

Need SSO, RMM w/ Mac client GP management (printers etc) from one web portal [closed]

I have a client that is looking for an all-in-one solution to manage users and computers. Preferable in the cloud or SaaS. They would like to be able to create/delete users from AD, integrate SSO ...
2
votes
0answers
1k views

Using SAML authentication within nginx

I want to restrict access to some static content, served using nginx, using an existing SAML 2.0 IdP. (In Apache, this would be done with a module such as mod_mellon or mod_auth_saml) What is the ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
502 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...