Windows Server

SP · Guest

Hello All,

Good day!

My dept has been tasked to provide a SSO architecture for our
organization.

We have read in a couple of posting that Kerberos protocol is the
answer to this,
but very few pointers or tips on how to go about this. What about Host
Integration Server from
Microsoft can we use this?

We are using Active Directory on Windows 2003 to store all user
information, and all the users
who will be accessing our web sites will be provided with a valid
domain user name and password.

The challenge here is that different departments have different web
applications and all these
applications need to provide a seamless flow.

following are the different web applications we have:

1. asp.net on IIS (Windows 2003)
2. PHP on Apache (Windows 2003)
3. Jave on Linux. (Linux)

now I have each one of these web applications on different physical
machines, I have link to each of these in all the
applications, we have also enabled Windows Authentication.

when user one logs for the first time (ex: asp.net on IIS) he / she is
prompted for his user credentials he / she enters
the same and then clicks on the link which will navigate him to second
application (PHP on Apache) / (Java on Linux) he is
prompted to enter his credentials again?

Is Kerberos the right solution for this?

has anybody implemented this or are there any pointers on the internet
where I can find stuff, we have just been given 2 weeks
to get this solution.

Please suggest!

Regards,
SP

Neil Pike · Guest

SP - yes Kerberos is probably a decent underlying solution for this. However,
HIS probably isn't as HIS is really related to SSO with mainframes.

A better solution would be to use SSO with Biztalk, which covers you MS/asp.net
transparently. Your other apps would have to be coded to call into this to
pick up credentials.

Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP

SP · Guest

Hello Neil,

What I understand here is use BizTalk for SSO all asp.net applications.

Then call the BizTalk API's within PHP or Java applicaions running on
apache / Linux to achive Single Signe ON?

Can you please guide me to some articles or reference materials on the
net which will give me a head start on this.

Thanks,
SP

Neil Pike · Guest

SP,

Try this

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/sdk/htm/ebiz_s
dk_samples_rwrq.asp

	Windows Server Forum Index -> Host Integration Server	All times are GMT
Page 1 of 1