Posted on 18/03/2016 11:07:02
Hi Magnus
SSO can be 2 things:
- The same username and password from the same user store used in more places
- The user only logs in to his Windows machine and then the user does not have to login in other places, i.e. in the browser
Dynamicweb supports both - question is if you can get it up and running in your customers environment.
@1: Yes, no problem
@2: It is in theory possible but really difficult. The webserver has to be a member of the domain, you need to set up the website to use only Windows Authentication (meaning anonymous users cannot access the site), the application pool has to run under credentials that has permissions to talk to the AD (usually Network Services will do). Then you need to configure your browsers to include Windows Credentials for the website hostname, see i.e. https://www.liquidstate.net/enabling-ntlm-authentication-single-sign-on-in-firefox/.
It has to be setup for each browser on each users machine. It can be done for Chrome, Firefox and IE. Edge maybe. The settings can be distributed with AD policies if you have an AD administrator who knows hes way around policies.
When the browsers have been setup, it should work - in theory. But it all depends on permissions and policies on the machines, and sometimes it can give some issues.
If you do not change the browsers to include windows credentials automatically, users will be prompted to specify username and password when they visit the website. They can then mark the username/password to be stored by the browser.
BR Nicolai
