OS Style Login Prompt vs Notes Login Form

HCL Domino Domino Forum
1

I’m working on an intranet portal.

I’ve found that disabling Session Authentication in the internet site document will force the browser to use the OS style login prompt. Our blackberry browser users prefer this style login screen.

The portal spans multiple web sites… and without SSO enabled, users need to login repeatedly for each new site accessed.

Is there a way to force the OS style prompt in conjunction with SSO session authentication so that they only need to login once for all sites?

I’ve already tried deleting the sign-in form mapping document in domcfg.nsf but domino then displays it’s default login form.

Thanks for you help

2

Subject: OS Style Login Prompt vs Notes Login Form

The OS-style prompt, as you call it, is displayed when you use basic authentication in Domino.

What happens is that when you request a web page in your browser, the server returns a request for authentication. The browser displays the sign-in dialog to the user, and then repeats the original request to the server, with the addition of the user’s credentials.

Now, with basic authentication, we also have what is called a realm. The authentication we just did, authenticates to a realm on the server. In Domino, the realm would be the directory where the DB is located. If the path to the DB is /dir1/dir2/db.nsf, the realm would be /dir1/dir2 . If the user now tries to access /dir3/db.nsf, he would have to login to the realm /dir3 .

If you use session authentication, and the user requests a web page, the Domino server redirects the user to the login form. The user enters the user id and password, and is redirected to the originally requested resource. Domino sends a session cookie to the browser. The user is now logged in to the server. The login form displayed, is the one defined in domcfg.nsf, or Domino’ default login form if none is found.

So, basically, you can use either basic authentication, or SSO, but not both, and not together.

Later versions of Domino can cater for some URL’s that need to use basic authentication, while the rest of the site uses SSO, but they will still not work together. It is a feature for allowing Web Services to work properly.

Now, what you can do in this case, is to set up 2 internet sites for your users. 1 site for normal PC users, and 1 site for bb users. You would need to have separate host names for them. Set the site for bb users to use basic authentication, and make sure that they login to a DB directly in the Data directory of the Domino server. That would make them authenticate to the realm / , which would allow them access to anything in directories below, that they have access to.

/Peter