Authentication problem with SSO on Multiple servers

Hi All !

I have been stuck in an issue with SSO configuration since somedays. The scenario is :

I follow the standard document of enabling SSO on 2 servers (both Domino 701). SSL + digital certificates are also enabled on the server and work fine.

Problem: Under Internet protocol tab > Domino Web engine > HTTP Sessions > Session Authentication = Multiple servers. When i select mulitple servers (SSO) and restart HTTP, all looks fine.

BUT no user can authenticate giving his login and password on the server through web. It quietly brings the user back to the login page again. And intersetingly when wrong password is given, the usual wrong login or password error is displayed.

When user logs in with SSL (HTTPS) + digital certificates, he is authenticated and enters the server. When redirected to second server, asks again for certificate and all works fine.

Any clues why users can’t login providing their login and password credentials ?? Any areas that i should look for to troubleshoot ??

Please help !!

Subject: Authentication problem with SSO on Multiple servers

Dear Shahan

SSL and SSO are not the same thing!

The trick to getting SSO to work is that:

  1. all the servers that you wish your users to access via SSO should have the SAME DNS domain name in the “Fully Qualified Internet Hostname” field in the server document e.g.:

server1.acme.com

server2.acme.com

  1. The LTPA token should have been set up for the same domain name: in this example acme.com

This is because SSO uses cookies and the DNS domain name is stored as part of the cookie. Servers will only be able to see/use the cookie if they have the same DNS domain name.

HTH

Subject: RE: Authentication problem with SSO on Multiple servers

Dear Melissa,

Yes i do know SSL and SSO are quite different things and have configured on my server for different purposes.

1- My servers are in same DNS domain.

2- LTPA token is also setup with same domain name.

I have followed the standard document for configuring SSO so i have definetly taken care of these things.

I have also tried to troubleshoot it by deleting the token and recreating it but to no avail. If you can suggest something different from what the book says will be a great help.

Thanks…