Monday, April 18, 2011

[21] Experimental Clarity Single Sign On (SSO)

Few days back, I was just experimenting on Single Sign On (SSO) with Clarity and came up with a light weight workaround. Though, it is still in Testing/Beta phase...

Click here (v13) to download source, code, instructions and limitations. (Refer Readme.txt).
Click here for V12 files.

For me it is working fine in Windows/Unix environments with Clarity 12.1 on it. (Not tested on earlier Clarity versions, though). Also works for embedded Clarity links/notifications in emails/documents.

Change log:-
18-May-2012 : v13 version published. 
21-Sep-2011 : 0.3 Beta Added enhanced security.
19-Apr-2011 : 0.2 Beta Minor Bug Fix
18-Apr-2011 : 0.1 Beta Released

8 comments:

  1. For Kerberos we use Negotiate. In order to make Firefox work we have to enabled trusted uris.

    1. Type about:config in the address bar and hit enter, 2. Type network.negotiate-auth.trusted-uris in the Filter box, 3. Put your server name as the value.

    ReplyDelete
  2. Hi,

    We got this working very well with clarity v12.1.2 but are planning an upgrade to v13. WOuld you know how to get this working on v13?

    ReplyDelete
  3. Matt, I have updated the blog and now it features v13 files as well.
    Let me know if you face any issues..

    This is just experimental and still evolving better ways to implement.

    Thanks
    Sangeet

    ReplyDelete
  4. Hi,

    I tried to use this for V13, but could not make it work. Changed settings in the jsp file and tried to test using auth.jsp. Any suggestions?

    ReplyDelete
  5. Does auth.jsp works and shows username, machine and domain name ?

    ReplyDelete
  6. So If we wanted to make this work with HTTPS what kind of code changes would need to be done?

    ReplyDelete
  7. Hi Sangeet,

    I tried using it on v12.1 and it worked almost fine.

    The exception is that it doesn't work for a few users when they access Clarity using the "Entry URL" specified in the NSA Application Properties. i.e. when accessing through the server name it works, but when accessing through the "entry URL" it doesn't work for a few users.

    Do you have any tip to avoid this ?

    Thanks

    ReplyDelete
    Replies
    1. I just cleaned the cache by refreshing the browser and now it works fine.

      Thanks.

      Delete