• State Verified Answer
  • Replies 3 replies
  • Subscribers 96 subscribers
  • Views 230 views
  • Users 0 members are here
Options
Related

qer-app-portal seamless sign on

Jonas Wiedamann
8 days ago

Hi

I enabled SSO for the new api-server-based web portal (qer-app-portal) using Entra as IDP.

The login using "OAuth 2.0/OpenID Connect (role-based)" works just fine.

Opening host.com/apiserver/html/qer-app-portal/ does not log me in seamlessly but welcomes me with a selection of auth. methods.

I dont want my users to select any method. I just want them to directly be signed on using oauth.

I tried disabling all other auth. methods but it didnt do the trick (Designer -> Base Data -> Security Settings -> Programs -> Application Server).

Any tips?

Thanks

Jonas

OIM 9.2.1

Parents
  • +1 3 days ago

    Hello,

    Have you tried going into the Administration portal and excluding the authentication options for the end-user? This result should be that the user will not be able to choose another login option.

    Steps:

    1. Navigate to Administration portal and login via system user,

    2. Navigate to Configuration and click on the Web Portal in the dropdown,

    3. Search for "auth",

    4. Configure ServerConfig/AuthenticationConfig/ExcludedAuthentifiers.

    5. Search for "sso",

    6. Configure ServerConfig/AuthenticationConfig/SsoAuthentifiers

    7. Save and recycle IIS

    Hope this shines some light to the problem,

    Zan

Reply
  • +1 3 days ago

    Hello,

    Have you tried going into the Administration portal and excluding the authentication options for the end-user? This result should be that the user will not be able to choose another login option.

    Steps:

    1. Navigate to Administration portal and login via system user,

    2. Navigate to Configuration and click on the Web Portal in the dropdown,

    3. Search for "auth",

    4. Configure ServerConfig/AuthenticationConfig/ExcludedAuthentifiers.

    5. Search for "sso",

    6. Configure ServerConfig/AuthenticationConfig/SsoAuthentifiers

    7. Save and recycle IIS

    Hope this shines some light to the problem,

    Zan

Children