We have been experiencing difficulties with our Single Sign On setup for a long time now. We are using the Metastorm web client with Internet Explorer, but we don't use the client portal to give our users their lists of BPM folders. Instead, they access their folders via external links, for example, from an email. To the best of my knowledge, using external BPM urls is an acceptable and supported way of accessing metastorm folders; it's published in the BPM Web Authors Guide.
Our approach works, for the most part, but periodically (and more frequently now, for some reason, with IE 8), our users will be presented with a windows logon box (see attached image). It mostly appears at random, but I've noticed that if they already have a number of other BPM folder windows open (successfully opened with SSO and all that), the windows logon box appears when they try to open the "next" folder (again, it happens at random, so it could happen after the second, third, forth, etc. successfully-loaded folder window).
Our users are particularly intolerant of extra clicks and extra typing; they want the authentication to be seemlessly integrated (and I don't blame them). So, while it works to have them type their credentials into the random windows logon popup, I don't consider that to be a solution.
Has anyone come across this before? I'd greatly appreciate any help with this issue, as it's fast becoming the main user complaint with our BPM systems.
