5.8.4 Single Sign-on through IIS
This method assumes that Management and Security Server is set up to use your IIS web server (Windows only).
If you installed using the automated installer and integrated with IIS during installation, setup is complete. If you used an alternative installation method, see the Management and Security Server Installation Guide for more information.
Users who have logged in to Windows do not need to log in again to access sessions. You must administer usernames and passwords through the identity system used by IIS, typically Active Directory.
Credential Prompts When Using Single Sign-on
When Management and Security Server is configured to use Single Sign-On through IIS or through Windows, a user will be prompted for credentials under certain circumstances:
-
The browser's process owner is not a valid Windows user or a member of the Active Directory domain. Typically the browser's process owner performs the interactive login to the operating system. However, an exception to this occurs when the command launches the browser as a different user.
-
The browser does not support single sign-on using Kerberos.
- - In Internet Explorer, this option is enabled by selecting . While this option is enabled by default, it can be overridden through Group Policies and practices.
- - In Mozilla Firefox, you must configure support for Kerberos authentication. Refer to Firefox documentation for instructions.
-
When using Internet Explorer, if the management.server.iis.url property contains periods (such as http://www.microsoft.com or http://10.0.0.1), the requested address is assumed to exist on the Internet. Credentials are not passed automatically, and a credentials prompt will appear. However, Internet Explorer can be configured to automatically pass credentials for such an address by adding it to the Trusted Sites list. Alternatively, you can configure a Custom security level in Internet Explorer to perform an .
