topic Re: SSO with Kerberos - non SSO users login problem in Alfresco Archive

SSO with Kerberos - non SSO users login problem

jacobp — Mon, 04 Jun 2012 14:30:59 GMT

Hi everyone,I have problem with Alfresco SSO using Kerberos. I managed to configure Kerberos and it works successfully. Users inside ActiveDirectory domain can use Share and Alfresco without the need for log in.Problem I have is that non SSO users (computer with account that is not in domain) have p

Re: SSO with Kerberos - non SSO users login problem

afaust — Mon, 04 Jun 2012 16:53:37 GMT

Hello,

it is a bit hard for Alfresco to guess which client can sign in with SSO and which cannot. It is advisable that non-SSO-capable users be provided with a direct link to the login page which prevents a popup. But if you want to have a single go-to address / link, you are out of luck - either SSO is attempted or not, either way you have problems with a part of your user base.

Regards
Axel

Re: SSO with Kerberos - non SSO users login problem

jacobp — Tue, 05 Jun 2012 08:32:27 GMT

Thank you for your reply.

So you want to say that there is no way for Alfresco to redirect user to form based authentication after failed SSO without unnecessary credential request.
If that is the case I'm not sure why is there redirect at all because it is not functional. Users don't expect to press cancel when they are asked for credentials so in the end they will never get to the form authentication.

Re: SSO with Kerberos - non SSO users login problem

loftux — Tue, 05 Jun 2012 08:49:44 GMT

The pop-up is Internet Explorer specific, if you use another browser like Firefox where SSO fails the failover is to the correct login form. If I remember correctly.

I'm not sure if this is some IE implementation you cannot workaround or if it is Alfresco implementation that needs a fix. Try filing an issue at https://issues.alfresco.com/.

Re: SSO with Kerberos - non SSO users login problem

afaust — Tue, 05 Jun 2012 15:33:52 GMT

In this case, it is Internet Explorer specific - Alfresco already provides as much info to the browser as possible to behave correctly.
Whenever Internet Explorer is related to a problem, in 80 % of the cases, it is the Internet Explorer which messes up… Just my experience.

Re: SSO with Kerberos - non SSO users login problem

haa05 — Thu, 27 Sep 2012 08:25:58 GMT

Hi Jacob,

did you ever find a solution to avoid this unwanted authentication popup in IE?
We are faced with the same problem.

Thanks!
Arno