Single Sign on

bturns

Hello,

Single sign on has come up in our requirements for our new Employee portal. Part of this requirement is that the user authenticates to a central sign on device through the portal and then be allowed to go directly to TeamSite (w/o logging in). I've looked at the OOTB integration with SiteMinder. However, we might possibly develop a solution with Oblix. Has anyone done this type of integration? Are there any pitfalls or caveats? Is it a complex integration?

Thanks,

Brian

Phil

Brian,

I was involved with an Oblix integration a few years back and it was a fairly hefty task. The trick is to be able to set the IWAUTH cookie as part of the single sign on process. Managing this cookie is what caused most of the headaches. I believe Content Services has methods that makes generating the IWAUTH cookie easier.

Another thing to consider is the two use case scenarios: one when the user authenticates in the portal and another when the user accesses TeamSite directly and needs to be authenticated. The first scenario was the biggest challenge because one server cannot create a cookie for another server. Therefore, you have to do a lot of redirecting to get the IWAUTH cookie set.

Hope that helps.
Phil