Single Sign On (SSO) 1

[smallredville]

Hi All,

I would like to check whether anyone has ever tried to do coding related to Single Sign On (SSO) in java before.

I read under LL Builder LAPI Help Documentation on how to create the livelink session with LLVALUE config parameter; but still lost on the values to be passed in order to achieve single sign on(SSO).

public LLSession (
String host,
String port,
String cookie
LLVALUE config)


My question is : Can single sign on(SSO) be done with lapi.jar?

If yes,I hope somebody who knows about it can share with me on what values I should pass to the LLVALUE config (in order to achieve single sign on (SSO)).

Lastly, I would like to say many thanks in advance.

Regards,
smallredville

 

[appnair]

Hi I have done this successfully many times with livelink SSO.But my setup was pretty much simple.Webserver had http and IWA on.I wrote this sample for that.

http://communities.opentext.com/communities/llisapi.dll/open/2124975

I would suggest that you get a fair understanding on SSO before trying to debug any lapi code.Things I do before trying to write lapi sso code is I would on a computer that is supposed to run my lapi code login as the domain user that is the a
lapi user.For eg if my domain user is <appusdomain>
\lapiuser I would thru a browser execute this command

http;//appulivelink/livelink/llisapi.dll?func=admin.testargs

at this point if the command works then look for REMOTE_USER
that will say appusdomain\lapiuser

if this works then it is almost a given that the webserver understands SSO so a lapi client can do this as well.Anything that works within a browser in livelink will work with lapi as well.That is how the product is designed.


Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer and probably certfiable,Livelink ECM Champion 2008

http://www.linkedin.com/in/appunair

 

[smallredville]

Hi Appnair,

Thanks for the information.

I appreciate it very much.

I would give it a try.

Regards,
smallredville

 

[appnair]

BTW the tunneled SSO works in this way.You send a request to the webserver(usually 80) not the lapi server port (usually 2099).The webserver hand shakes the auth with ad or ldap and if authenticated hands it off to livelink's cgi program exe or llisapi.At this point livelink gets the "REMOTE_USER" sees if that user is present and does the transaction.I use the "LAPI test Connection utility" from OT to see how the SSO is configured and extrapolate on that in my lapi code.SSO involving certs is possible but I have never had a reason to work in those environs but the lapi documentation has examples on that as well

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer and probably certfiable,Livelink ECM Champion 2008

http://www.linkedin.com/in/appunair