Implementing Web SSO ina large organization

We are implemeting Web SSO for a very large organization. There are over 200 servers. Because there is a 64k-size limit in the Domino Server Names field of the SSO doc, we thought we would create multiple Web SSO config docs for the servers in two domains. The issue is that some of the servers need to be in multiple Web SSO docs. You cannot select more than one Web SSO from a server doc or Web Site doc. How do we implement Web SSO for our organization?

Subject: Implementing Web SSO ina large organization.

I haven’t tried this but have you tried using a server group in the SSO doc? (aka a group with a “server” group type)

Subject: RE: Implementing Web SSO ina large organization.

You cannot use a server group. See “Creating a Web SSO configuration document” in Lotus Domino Administrator 6 Help:

Under “Domino Server Names” it says:

Groups, wildcards, and the names of WebSphere servers are not allowed in this field. Only Domino servers can be listed as participating servers in the Server Names field.

Also notice this:

Note There is a 64K-size limit on this field. An error message appears when the limit is reached, such as when the names of several hundreds of servers are entered. It is recommended that you create more than one Web SSO Document if this limit is reached.

So you should probably create several documents. I haven’t tried it, - we do not have that many servers :slight_smile:

BTW: Can anyone tell why a modern piece of software anno 2003 has 64Kb limitations???

Subject: Implementing Web SSO in a large organization.

Well the problem is, that each document has servers in it. What if a user needs to authenticate with servers in several documents. I assume they get a new password prompt for each server that is in a separate sso doc. True? If this is the case, implementing SSO does nothing for us. I was hoping that there was a workaround for the 64k limit.

Subject: RE: Implementing Web SSO in a large organization.

I submitted an incident with IBM Support. This is what they suggested:Create the first Web SSO doc, create the key, add servers, save teh doc.

Copy and past the doc giving it a new name and new servers.

Repeat with the number of docs necessary.

He said that since the token key is the same, it will work for users connecting to servers in different web soo docs. He mentioned to make sure we did not duplicate servers in the server field if copying the document. He also said this same document can be copied into different domains if the user needs to authenticate across using SSO.