nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

SSO(Single Sign On)

kkrishnan

Hi Brian and all,
How can I implement SSO with the QuickStart Application? I am using fully licensed iServer and Information Console. Is it possible to be signed in automatically into the mashboard app once user logs into main app?

Please let me know.

Thanks

Find more posts tagged with

Comments

kkrishnan

adding to my question:
After the authentication from the main application , the link to the mashboard should go to what page in the QuickStart application?
What page is called after logging into the dashboard to view the different tabs based on user security?

Please let me know.

bhanley

Are you authenticating with Information Console/iServer at some point? If you are then the necessary credentials will be set on the user's session and nothing further will be required. If you are not already authenticating into Info Console or iServer, we need to look at your security setup and walk through how to configure SSO (which should not be a big deal).

kkrishnan

Hey Brian,
Thanks for replying back.
The whole dashboard app is designed the way you described in the demos...it sits on top of Information Console/iServer. They login to the app using the userid/pwd set up in iServer. Given this scenario, please advise.

bhanley

I guess I am a bit confused. If you have the Mashboard configured as it is in the demos, the user will have to sign on one time and not be challenged again unless they close their browsers. What problem are you seeing?

kukkri

sorry for the delay....OK here is what I mean by Single Signon.

Users log into an external app(not Quickstart Mashboard). The users then see a link to launch the mashboard. At that point they should not be asked to login again into the mashboard app or even see the login screen. They should be authenticated to see the different tabs(depending on their privileges set up in iServer).
I know how to set up the authentication part.
My question is how do I bypass the mashboard login screen and take the user directly to the different tabs.

Hope this helps.

bhanley

You would need to setup the iServer to work with your existing security repository. Doing this would allow iServer to bypass authentication and use whatever token you have already placed on the user's session. that integration is not done on the mashboard layer, it is done on the iServer itself.

The integration work itself can be pretty straightforward depending on the underlying security paradigm. What security model are you using?

kukkri

We are planning on using RSSE with OID.

So the way I understand it is, once iServer is authenticated, via Iportal(iportalID) there should be no issue directly bypassing the login page of the application.

bhanley

You are correct. The Mashboard is already set to by-pass the login page if the authentication is already in place.

kukkri

Thanks Brian. i will get back if we run into any issues.

PuckPuck

What you setup is RSSE, which is for authorization and back-end security storage.

You will also need to create an IPSE/ICSE which is the SSO module. Write and deploy this, like you would normally on Information Console (instructions are in your manuals). Mashboard uses Information Console security mechanisms, so if you can get SSO to work with Information Console standalone, it will work when mashboard is deployed as well.

kukkri

Thanks PuckPuck...yes we plan on building the IPSE/iportal Security Manager that will implement the SSO...but just wasnt sure if we could bypass the login screen on the mashboard app.