BO support a "mixed" Basic/Integrated SSO setup

[Former Member]

Hi All,

One of our customer is having issue in XIR3.1,where:

Customer is on XIR3.1 Fixpack 1.5 ,Win AD SSO IIS.Customer has an IIS setup an extranet environment where access to an outer web page is 'Basic Authentication' and then an InfoView link to BO web pages is "Integrated authentication".The external access page requires Windows Basic Authentication all BOE virtual web sites require Windows Integrated Authentication

When we click on the Infoview link ,we get the login credentials page ,sso does not work ,irrespective of the Integrated Windows Authentication enabling, Does BO support a "mixed" Basic/Integrated SSO setup?

Thank you in Advance.

Bill

[BasicTek · Accepted solution]

it's not mixed that's the problem we don't support basic. We do however have a URL that you should be able to give to extranet users http://myserver:8080/InfoViewApp/logonNoSso.jsp as opposed to http://myserver:8080/InfoViewApp/logon.jsp

Then extranet users get prompted to login to infoview and intranet users can use SSO.

Basic auth (from my understanding) doesn't require passwords, so a user (say Bob) can logon to the server by telling IIS he is Administrator... We used to support this in our legacy 6.5 product which was not very secure. Using the method above you can force the extranet users to use enterprise, or even LDAP/AD (manually) to logon creating a much more secure environment and one that works properly.

Regards,

Tim