SSO

[thoqui]

Hello,

I wish to configure single sign on using Windows Authentification for IIS with otrs 3.3.8 but it doesn't work.

Here's my configuration :

- For customer interface
In "Framework -> Frontend::Customer::Auth", Customer::AuthModule = HTTPBasicAuth
Then, check "Customer::AuthModule::HTTPBasicAuth::Replace=mydomain\"

- For agent interface
Create the directory file C:\otrs\OTRS\Custom\Kernel\ and move the file C:\otrs\OTRS\Kernel\Config.pm in this directory file.
Then, open the file C:\otrs\OTRS\Custom\Kernel\Config.pm to add SSO :
# Add for SSO :
$Self->{'AuthModule'} = 'Kernel::System::Auth::HTTPBasicAuth';
$Self->{'AuthModule::HTTPBasicAuth::Replace'} = 'mydomain\\';
# If you use this module, you should use as fallback
# the following configuration settings if the user is not authorized
# apache ($ENV{REMOTE_USER})

And i configured IIS :

SSO1.png

Thanks for your help

Thomas

[wurzel]

Hi,

SSO is not only configuring your webserver and/or otrs, it also requires correct DNS/FQDN names, correct times and correct browser settings (maybe more)

For this, you might want to ask in an SSO forum.


My recommendation: The new OTRS versions will not run on Windows. So don't spend time on this task, now.
Upgrade your OTRS, switch to Linux and build your SSO there.

Flo

[thoqui]

Hello,

Thank you for your answer.
But I will be more precise :
I applied this configuration on OTRS 3.3.8 at a customer company.
Then, a popup asks the Windows connection whatever that I enter into.

After, I retried the same configuration on my PC to test and it works fine !

So, I think that there is a configuration to do on IIS.
What do you think ?

Regards,
Thomas

[root]

If it works with your PC (I assume it's the same server) why do you search the solution on the server side and not at the client?

[thoqui]

No, it isn't the same server.

[root]

Most of the time it' s client side. First approach: Check the security zone OTRS is in (should be intranet)

[thoqui]

Hello,

Thanks you for your answer.
I asked the customer company for the security zone and I always wait his answer.

If OTRS is in intranet, do you have any idea ?

Regards,
Thomas Quintin

[thoqui]

Actually, OTRS is in Trusted sites.

So, this is a problem ?