Questions tagged [single-sign-on]

Single sign-on (SSO)is a session/user authentication process that permits a user to enter one name and password in order to access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a particular session.

Single sign-on (SSO), is an authentication method that requires a user to only log on once, with a single user ID and password, to multiple applications, systems or Web sites. Prior to single sign-on, a user had to enter both a user ID and password, each usually different, every time they logged on to different applications or systems in the same session. This obviously can be time-consuming, especially in business environments, where time is money yet time is wasted because employees have to keep logging on each time they access a new system from their desktop.

SSO is usually implemented through a separate software authentication module that acts as a gateway to all the applications that require logging on. The module authenticates the user and then does all the heavy lifting -- managing access to the other applications. It acts as a master data store for all the required logon credentials.

An example of an SSO module is Microsoft's Passport, which allows a user to register once and then acts as a gateway to multiple Web sites, each of which normally requires its own logon. There are other commercial SSO modules available, such as Computer Associates' eTrust and there are other modules in Java and PAM for Linux.

27 questions
47
votes
5 answers

How to configure Firefox for NTLM SSO (Single-Sign-On)?

My computer and user belonging to the domain, I want to connect to my NTLM-SSO-enabled intranet website http://intranet without providing a login/password. How to do it with Mozilla Firefox?
Nicolas Raoul
  • 10,711
  • 18
  • 64
  • 102
6
votes
2 answers

Setting up a git repository on a server

I read through the other git questions here but couldn't really follow whether they are trying to do the same thing as I am. So if you find any duplicates, please let me know. I have a central server with SSO installed. All my machines are connected…
lostInTransit
  • 349
  • 1
  • 4
  • 14
6
votes
1 answer

Enable NTLM SSO in Firefox via Group Policy

I would like to enable NTLM for a specific intranet site. For that I need to configure the following parameter: network.automatic-ntlm-auth.trusted-uris to add x.xyz.com How can I achieve this via group policy for Firefox Users? I've come across…
user2284685
  • 63
  • 1
  • 1
  • 3
3
votes
2 answers

Office365 Users SSO for Atlassian and Slack

So we're currently using Office365 and we have just started to use the Atlassian product range and Slack. I want to try and have a central place for all my users and add / remove staff as when required. Is it possible to do this through Office365 or…
2
votes
1 answer

user permissions with icingaweb2 (with SSO authentication)

We're curently setting up Icinga2 and Icingaweb2 as our global monitoring. To authenticate the users, we use an Apache module (Single Sign On) which let only allowed users to access the web ui. Icingaweb2 is configured with…
samb
  • 356
  • 3
  • 9
2
votes
0 answers

SSO doesn't login immediately

I created a web-app with SSO (Single-Sign-On) integrated. The app authenticates the user via AzureAD. What I want is, that the user is logged in immediately after clicking on the app-link. Unfortunately, in some cases when I click on the link, the…
2
votes
0 answers

Azure Portal: SSO initiated login with external provider

I successfully configured Azure to work with an external IdP according to https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-saml-idp However if I try to do an IdP initiated login, it seems that the SSO service…
1
vote
0 answers

FireFox SSO session used by Windows for further authentications?

On our document management system we use SSO and I also configured FF for auto login. Now that I extended the DMS with a feature which should load content from the Repository via SharePoint-Module in our E-Mail Client we would need a browser…
1
vote
0 answers

Setting Up Single Sign On with Active Directory

I need help setting up Active Directory with Single Sign On. I think this may be called Kerberos. I have a simple requirement in that I have 3 types of users: guest,operator, and admin. I would life to setup locally first. Right now I have an AD LDS…
1
vote
1 answer

Desktop RSS reader that supports Single Sign On?

I'm looking for Windows desktop RSS reader application that supports single sign on. Could you recommend one please? EDIT: There are some websites, which need authentication. I have an account and I can login to the website in order to see the…
m_pGladiator
  • 127
  • 1
  • 7
1
vote
2 answers

Firefox and Chromium don't do Kerberos negotiation, cURL does?

I can successfully run kinit to get following klist output: Ticket cache: FILE:/tmp/krb5cc_1001 Default principal: [email protected] Valid starting Expires Service principal 01.03.2022 17:24:01 02.03.2022 17:23:58 …
1
vote
0 answers

Gitlab Azure Oauth2 - add identifier to git account as admin

We have a gitlab server set up on Ubuntu 18.04 LTS. I have configured it to use Azure oAuth2 to limited success - users are able to sign in via Azure/Office365 when first registering. What I want is to be able to link users with existing accounts in…
1
vote
1 answer

SSH Single-Sign On with Kerberos

I want to authenticate with SSH through Kerberos SSO. Now when I'm logged in with my user principal on sourcehost I get my Kerberos Ticket but can't use it to SSH into targethost. The problem seems to be the hostname. I have a host principal…
bassjoe
  • 75
  • 10
1
vote
1 answer

single sign on Onelogin through curl

I use single sign on (Onelogin) for a corporate website and want to access the website through curl. However, curl simply redirects me to the onelogin page, even if I've already authenticated through my browser. Is there a cookie stored on my…
barrrista
  • 1,729
  • 7
  • 29
  • 41
1
vote
0 answers

Change Frontmotion Firefox config for SSO

I'm trying to change the firefox config network.automatic-ntlm-auth.trusted-uris; so I can use SSO for everyone on my companies internal page. First I found this: manage Firefox via group policy I tried this on the …
MrSmith
  • 111
  • 2
1
2