Single Sign on

If you have questions about using mojoPortal, you can post them here.

You may want to first review our site administration documentation to see if your question is answered there.

This thread is closed to new posts. You must sign in to post in the forums.
12/3/2010 10:07:09 PM
Gravatar
Total Posts 2253

Re: Single Sign on

Hey Joe,

Just reviewing this thread and I noticed you may be using the wrong slash in your code. You're using a forward slash (/) for the domain separator but a back slash (\) should be used.

Thanks,
Joe D.

12/4/2010 7:11:20 AM
Gravatar
Total Posts 18439

Re: Single Sign on

Thanks Joe! you are right..

Best,

Joe

12/4/2010 10:00:45 AM
Gravatar
Total Posts 18439

Re: Single Sign on

The SSO works perfectly when I go to http://servername but when I browse to http://servername.domain.com it always asks for the logon. Any ideas?

Windows Authentication only works on a local network not on the internet. If servername.domain.com maps to a public internet ip address it will not work.

12/6/2010 11:22:26 AM
Gravatar
Total Posts 154

Re: Single Sign on

I fixed it by adding the full DNS name to IE as a trusted Internet site in the IE security settings. 

12/6/2010 11:56:22 AM
Gravatar
Total Posts 18439

Re: Single Sign on

I would not recommend using Windows authentication for a site that has a public facing ip address on the internet, it should only be used on a local network/intranet. 

Users on your local network should connect over the local network not the public ip address. I'mnot positive but by exposing your site on the internet you "may" be giving hackers an opportunity for dictionary attacks to guess actual domain user credentials because IE will keep prompting until valid credentials are given.

http://msdn.microsoft.com/en-us/library/ee825205%28CS.10%29.aspx

 

12/6/2010 12:37:51 PM
Gravatar
Total Posts 154

Re: Single Sign on

It's all for local use.  The problem I'm having is our VPN users use the FQDN to access all of our servers. 

3/16/2011 9:29:54 AM
Gravatar
Total Posts 3

Re: Single Sign on

For a site that was not initially using Windows Authentication, how do I give myself administrator rights again? Looking at the member list there are now 2 accounts for me, dest135 and domain\dest135. I temporarily turned off windows authentication and went back to the old web.config, but I wasn't an administrator anymore?

3/16/2011 9:42:49 AM
Gravatar
Total Posts 3

Re: Single Sign on

I turned it off again and refreshed a few times and I was given my administrator priviledges back, then added my new account to the administrators group and deleted the old account after I turned Windows Auth back on. Works like a charm now, absolutely wonderful!

You must sign in to post in the forums. This thread is closed to new posts.