jjdeken Trusted Contributor.
Trusted Contributor.
371 views

Single Sign On Using NTLM

Has anyone experienced the following issues when trying to implement SSO using NTLM? If so how were they resolved. 

* Does not seem to work for all users. Some users experience just getting a blank screen where it will not log them in.   

     ^One thing we noticed in IE is if you change the internet Option and uncheck the option of "Enabling              Integrating Windows Authentication", Clear Temp files & history, as well as restart IE. Then it will start working      for some users. This is confusing as you would think this would need to be checked to work not unchecked. 

* When setting the authenticationi method in Workbench it does not appear to matter if their authentication is set to LDAP when NTLM is turned on it will use NTLM.

* Will SSO on be made compatible with more browsers than IE?

Any guidance or knowledge around how to make this work or other solutions that work better for SSO with PPM would be greatly appreciated.

Thanks.

0 Likes
2 Replies
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Re: Single Sign On Using NTLM

Hello,

Check that you have the Windows authentication on both server and Website.

Also Check the anonymous authentication if is enable try by disabling it and the other wat around too, to see if the behavior change.

About if SSO will be compatible with other browsers, NTLM specifically only works with IE.

Did you follow all the steps on the Admin guide to configure the NTLM authentication?

Which values are you using on the parameter AUTHENTICATION_MODE?

 

Thanks,

Francisco Morales
Customer Support Engineer
0 Likes
jjdeken Trusted Contributor.
Trusted Contributor.

Re: Single Sign On Using NTLM

Francisco, Thanks for the information below. 

What we ended up doing, which we have to run more test on but appears to have fixed, is moved up theNTLM in the provider list of the Windows Authentication in IIS. We did a couple test and it may have fixed the problem we were experiencing.

Another question you or someone may be able to answer is what happens to things like Service Accounts we have created to do special admin tasks? Does PPM have a way to stop the SSO to log in with another account? Any and all thoughts around this are welcome.

Thanks again.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.