SSO and IIS7 Problem

[Former Member]

Hello,

I am currently having an issue in regards to IIS7 and SSO on a 2008 server environment. The issue is as follows:

We are in the final stages of the installation and the issue with SSO is that when we try to log in to test it passes through the service account and not the account of the user logged in. The Service account is also in the same AD group so Business Objects uses that and logs in as the service account.

If we manually log out, it will send us back to the Infoview log in screen, from here if the users types in the AD use ID and password the account is accepted.

I think I am close but was wondering if this issue rings a bell with anyone or if anyone can direct me as to what I may have overlooked.

The Service Account is created, the SPNs are set up, the XML files have been modified per the white paper. I have completed SSO before this issue just has me stumped.

Thank you in advice,

Kris

[BasicTek]

SSO by it's nature is a challange response configuration in which the OS user gets challanged and responds to IIS. It would be extremely unusual to have a different account login and seems to be an indication something is not right with the configuration. What document did you use to set this up?

The domain\user is logged in the IIS logs. You can also setup SSO(integrated windows authentication) to an image file (*.jpg) in another path (wwwroot) to verify if the wrong user is being passed to that as well. Typically something in the Microsoft configuration would be at fault since SSO occurs between the client and IIS.

Regards,

Tim