HTTP Server: Error loading Web SSO Configuration 'LtpaToken' (Single Sign-On configuration is invalid)

Hello, I’m triyng to configure a SSO between Websphere and Domino 8.5.2

But after configuring the server, when I restart the http tasks the server shows the following message :

HTTP Server: Error loading Web SSO Configuration ‘LtpaToken’ (Single Sign-On configuration is invalid)

I followed these steps for the configuration:

STEP1-I create the SSO configuration document

In the server configuration document :

Create Web button > SSO Configuration


—Token Configuration—


Configuration: “CustomLtpaToken”

Organisation: blanck

DNS Domain : “.mycompanyname.com”

Maps Names in LTPA tokens : Disabled

Require SSL protected com. : Disabled

Restrict use of the SSO token[…]: Disabled


— Participating Servers—


Domino server Names: black, because only the current server will be accessed by the WebSphere Server.

Windows single sign-on integration : Disabled


— Token Expiration------


Expiration : 30

Idle Session timeout : no enabled

STEP2- I import the LTPAKey … Keys>ImportWebsphere LTPA Key…

And the keys are succefully imported…

… a new section is created in the doc :


— Websphere Information-


Token Format:LtpaToken (compatible with Domino 7 and prior releases)

LDAP Real : “mycompany.com:389” (the same domain name value as in the DNS Domain Field…)

LTPA Version :1,0

The Web SSO Configuration document is located under the WEB\Web Server Configuration view…

STEP3 - I configure the SSO in the server document,

Internet Protocol Tab > Domino webEngine Tab> HttpSession section >

Session Authentication: Multiple Servers (SSO)

Web SSO Configuration : I select the “mycustonLtpaToken” document just created before.

The issue occurs when I restart the http task on the server I got no messages :

HTTP Server: Error loading Web SSO Configuration ‘customLtpaToken’ (Single Sign-On configuration is invalid)

There are no other messages… I don’t find why the configuration is invalid…

Rem :

-There are no internetSites on the server.

  • CustomLTPAToken is the only one SSO document.

Thank you.

Richard

Subject: You must list the domino server in the SSO document

The SSO cryptographic keys imported from WebSphere are stored in the SSO document. They will be encrypted for the participating servers. So if you do not list the domino server in the SSO document, then the server will not have access to the keys. You must list the domino server in the SSO document.

best regards,

Jane Marcus, IBM