Seamless login with AD based on IE username

 
1
0
-1

Hello,

I am trying to find out if it's possible to get the username from IE and automatically login the user.  We do this for our wordpress install on IIS and it works great.  Is that possible for Joget??  I have my first app built and it's working but I need to roll it out to 100+ users and I don't want them with another password to forget and it needs to be easy to use.  Looking forward to working on other workflows but I need to get past the authentication part.

Any help is greatly appreciated.

Rich.

    CommentAdd your comment...

    2 answers

    1.  
      1
      0
      -1

      You can have a look at Single Sign On (SSO)

      1. IT Department

        So I am able to embed a script on my web page that then calls the web/json/directory/user/sso and sends it the variables and I see in the log that it successfully authenticates. Now I just need to be able to link into my joget app and have it authenticate. Are there any examples of how to setup a post from an outside page? If I setup a simple form and send the variables over it blocks because it thinks is a cross site scripting attack. Thanks for the help.

      2. Chris Angel

        This is a security measure of Joget. You can have a look at Domain Whitelist for API Calls here --> https://dev.joget.org/community/display/KBv6/Security+Best+Practices#SecurityBestPractices-SSL

      3. IT Department

        I was able to get the seamless going. I use the master user / password and then loginAs. At first I was using the javascript and I could see the call working but the link would not work. It was as if the call didn't set a session variable or any type of persistence. I was not able to put the j_master vars in a form variable and post it but I was able to put it all in the URL and then link right over. Ended up writing a plugin for wordpress to make a shortcode for the form post url. Thanks for the guidance. I am going to test using the hash version of the master user password but it does work.

      CommentAdd your comment...
    2.  
      1
      0
      -1

      Hi, you can also check Joget Workflow SSO to Active Directory with Kerberos or Joget Workflow SharePoint SSO Integration

       

      1. IT Department

        I am able to do Single Sign On with no problem. What I need is seamless signon. I have tried the LDAP built in and the Workflow SSO to Active Directory with Kerberos and that works also if the user stops to sign into the application. Going to see if I can't get Sharepoint SSO to be seamless. Really don't want to have to start writing code as that will probably knock this platform off the list.

      2. Anders

        Kerberos SSO is indeed seamless, if you need to sign in again then it is likely a misconfiguration and you be seeing some error messages in your logs.

      CommentAdd your comment...