After installing the SSO gateway, you will need to set up SSO at the user's account level. Users who require PerfectApps log-ins will need to have user accounts created for them by the PerfectApps account administrator and a log-in password must have been sent.
The user account name must have been added to the web.config file that was installed with the SSO Gateway. |
1.Log in to PerfectApps (with a user account that has Account permissions within the Full User group) and on the Settings Dashboard select Account Settings from the tree view. Then select the Account Details option. 2.In the Single Sign-On section, check the Use Single Sign-on check box and enter the Gateway URL and Password. (The Gateway URL was supplied during installation of the SSO gateway.) 3.If you want to ensure that users can only access PerfectApps using single sign-on and should not have access to the normal PerfectApps login screen, select the Only allow log-in If domain authenticated check box. 4.When Single Sign-on is selected the Use SSO Links by default on Notifications option is enabled and selected. Any existing notification links included in apps built prior to Single Sign-on being selected (with the format {|link|}) will change to Single Sign-on links automatically. Un-check this option if you require existing notifications to remain as regular (non single sign-on) links. Existing notification links included in apps built with Single Sign-on selected (with the format {|non-ssolink|} or {|ssolink|}) will not be affected. 5.Click Apply Changes.
When a new user logs in to their PerfectApps account, PerfectApps will ask them to log in normally. This log-in will only be required on the initial log-in. Once they have logged in (via the SSO Gateway), PerfectApps will remember the association between the user and that user’s Windows Authenticated User ID. The next time the user logs in (via the SSO Gateway), PerfectApps will recognize them based on their Authenticated User ID, and log-in will be automatic. |
Trying it Out
Before you start, make sure that you can log-in to PerfectApps normally. Disable the Integrated Authentication setting within IIS and then log-in to the normal PerfectApps URL. This ensures that there are no issues with PerfectApps itself.
Now enter the URL of the SSO Gateway. It should take you to the PerfectApps log-in page, but only once. You should log-in here as you normally would. PerfectApps will now remember you the next time you access it via the SSO Gateway.
See also: Synchronizing with a Network Directory Service
Return to: Account Setup and Administration