Active Directories (OpenInsight 32-Bit)
At 04 FEB 2010 05:23:19AM Martin Drenovac wrote:
I see that the last conversation on Active Directories is around 2008 via WMI.
With the new world of OI, do we have an easier more direct solution to integrate with AD, our customers are requiring one network logon for all applications.
Thank you
At 04 FEB 2010 11:28AM Bob Carten wrote:
Hi Martin
We are working on a single sign on capability for OI 9.2
The idea is that you can set up CFG_LOGIN record with a flag for single sign on mode, and a list of network security groups whose members are allowed to log in. If in single signe on mode, a user is allowed in if they are a member of an allowed group, and @usernet is set to their network login. Openinsight will ignore /UN= and /PW= information passed on the command line.
Will this meet your needs?
At 05 FEB 2010 03:21PM Martin Drenovac wrote:
Bob - No, we want to integrate AD with the login name used by our application. The startup of OI is just fine with the /UN etc..
When you login to our applic, we present a username / password scenario - instead we want to call AD and if your login name to the network (in the AD) is ok, we'll just let you in without prompting for different username and password.
Customers want one place to manage their users and that's in their AD - they don't want yet another login name password in the applications.
Cheers Bob
At 05 FEB 2010 04:56PM [url=http://www.sprezzatura.com]The Sprezzatura Group[/url] wrote:
How would they be on the network if their login was not OK?
World leaders in all things RevSoft
At 07 FEB 2010 12:57AM Martin Drenovac wrote:
The sequence would be:
login into network as martin
kick off OI - internally we check that martin is logged in on network.
By definition, I surmise you're saying force the OI login to that off the AD login name and all is done.
At 07 FEB 2010 05:49AM [url=http://www.sprezzatura.com]The Sprezzatura Group[/url] wrote:
No we're saying put OI on the network and if they can access OI they're on the network and thus by definition they are logged onto the network and don't need to be checked further.
World leaders in all things RevSoft
At 07 FEB 2010 09:57PM Barry Stevens wrote:
]]By definition, I surmise you're saying force the OI login to that off the AD login name and all is done.
Sounds logical to me