How to silent install/reinstall or enable the Notes Single sign on

HCL Domino Domino Forum
, , , ,
1

Hi all,

How do i install or enable the Notes Single sign on feature on V9.0.1 silently?

Currently the feature is not enabled, what i tried is i manually run the installer and reinstall the IBM Notes Syncing and then the property Use my Windows Log in is already not grayed out.

But im planning on how to do this with over 50 plus users without manually reinstalling and enabling the feature one by one.

Is there a way to do it ?

Thanks as always.

2

Hi Tastitch,

Check for parameter "ADDFEATURES= ClientSingleLogon" in below URL.

It can be used while performing Notes Client silent installation. See if that helps in meeting your requirement.

Reference URL --> Performing a Notes® silent install or upgrade on Windows™

Few queries as well -->

Any specific reason for using V9.0.1 along with Notes Single sign on feature?

What is the OS (windows 10 or 7 or anything else)?

I would suggest to go through documentation available over GOOGLE regarding "Single Sign on" as well as "Notes Shared Logon".

https://help.hcl-software.com/domino/10.0.1/admin/conf_usingnotessharedlogintosuppresspasswordprompts_c.html

https://help.hcl-software.com/domino/10.0.1/admin/inst_enablingnotesclientsingleloginduringinstallorupgr_t.html

Sharing few additional Knowledge articles -->

Notes Single Logon support in Windows 7

Supportability Q&A about Notes and Windows 10

Steps to ensure that Notes Single Logon is working as designed

You might need to consider information provided in all above URLS for your future plan with respect to usage of Notes Client and Single Sign on.

There are chances that sooner or later there will be no support provided for this combination.

Regards,

Amit

3

Hi Amit,

Thanks for your response, we are trying to address a risk that resulted in the latest technology assessment on the company.

Primary issue is the lack of ability of Lotus Notes to lock out a user when they try to enter 3 or more wrong password on Lotus Notes. As a way to address this, we would like to try to sync the password with the Windows log in.

The OS used across is Windows 10.

I am also reading which one is better to implement, Notes Single Sign on or the Notes Shared Log in.

4

Hello Tatstitch,

Notes Single Login is deprecated since HCL Notes 12.0. Please refer below documentations.

https://help.hcltechsw.com/notes/12.0.2/client/components_not_included.html

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0087037

Please refer below product documentation on Notes Shared Login.

https://help.hcltechsw.com/notes/12.0.2/client/sec_nsl_desc_t.html?hl=notes%2Cshared%2Clogin

Regards

Aniket

5

Thanks for information Tatstitch.

With the updates provided by you, I would suggest to go for "Notes Shared Log In".

Regards,

Amit

6

Do the people who did the security audit know, that the time to enter another password DOUBLES on every try, so that brute-forcing is not really feasible as after a few attempts you need to wait minutes and then hours before you can try again?

AND: I'd also use Shared Logon instead of the deprecated single logon. It has the following advantages:

  • works with ID Vault (Single Logon with ID Vault works "somehow", but is not supported and produces strange problems sometimes
  • no need to install anything on the client: Just use policies to assign that to users
  • additional security as Notes ID is encrypted and protected by windows - cannot be used on any other PC or with any other windows account on the same pc.
7

Hi Tastitch,
"ADDFEATURES=ClientSingleLogon" is used to enable single Sign-On/single logon feature during Notes silent installation.
For example:-
IBM_NOTES_CLIENT_9.0.1.exe -s -a /s /v"ADDFEATURES=ClientSingleLogon /qb+"

Regards
Pravin Kabi