Home > IT Answers > Security > Single Sign On with Windows NT and IIS and Domino
HenkeS
0 pts.
 Single Sign On with Windows NT and IIS and Domino
Architecture/Design, Biometrics, Digital certificates, Identity & Access Management, Lotus Domino, Microsoft Windows, provisioning, Security tokens, Single sign-on
Hi there, my dear peers, What solutions do you know for the following situation: A user has logged in into Windows NT using a certain name/password combination. He then starts his webbrowser and opens an application on an IIS webserver (same domain) where he must be authenticated without entering his NT name/password again. In that application, there is a link that leads him to a Lotus Domino web application in the same DNS domain. Here he needs to be authenticated again, without entering his NT name/password again. I've heard that SSO between Windows and IIS is working fine, but what needs to be installed in addition to the default installation and what settings should we set? Can a challenge by the Domino server also be automatically responded to with Windows NT name/password combination? What tools to sync NT and Domino Directory can you recommend? Regards, Henk.

Software/Hardware used:
ASKED: August 30, 2004  10:05 AM
UPDATED: August 30, 2004  12:45 PM
RELATED QUESTIONS
Answer Wiki:
Your problem looks pretty simple, in IIS all you need to do is enable the IIS security on the properties of the desired webpage, and select the loacl domian as the authority for the page, then on you domino server on the console import the users from the local NT Accounts, this will import all your NT accounts including our local and global groups (and OU also)and aftar this just sync your passwords (check box in Domino)and you will have SSo, In other way if your dominan is NT 4.0 I recomended to use Domino as your LDAP console and get a windows LDAP client for SSO relying all your authentification to Domino. Just because LDAP if much better atuhentification authority than just MSLMS (security in NT 4.0). But if you are using W2K or W2K3 I recomend to use the Active Directory LDAP console for SSO. regards
Last Wiki Answer Submitted:  August 30, 2004  12:45 pm  by  Memito   0 pts.
All Answer Wiki Contributors:  Memito   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _