Use Token to Access CMC 1

[OzWolf]

Greetings,

I have recently completed a custom interface for the Crystal Enterprise environment, using styles and look that better suit our corporate identity.

The only problem is that I am trying to create a seamless connection between the custom interface (and its respective token) and the CMC. Everything I've tried with passing the token via the URL (a little bit legacy, I know, but there is no documentation on this) has failed. The CMC simply refuses to accept any authentication token created by my interface and asks the user to login again, thus creating two logged in sessions as well as removing the concept of seamless entry.

Does anybody know how to carry an authentication token over to the CMC?

Any help greatly appreciated.

 

[jedownsjr]

I have done similar things using the COM SDK (to publish reports, schedule reports, etc.) but I do not access the CMC itself. This functionality is available through the COM SDK. There is a method in the sample code examples that demonstrate how to use the "CreateLogonToken" method. It is also stored in a cookie set by ePortfolio. You can retrieve it and use it to log on seamlessly using the same CE session. Hope that helps.

 

[OzWolf]

Thanks, but the custom interface is a complete rebuild of ePortfolio with the look and feel for our corporate image so it uses the CreateLogonToken method (as well as a 1001 other ways of making the CMS dance our tune) however there is no documentation on passing that token to the CMC as a valid, logged on security token.

I'm sure there is something, such as a cookie or session variable that would do the job...just trying to find it is a problem.

 

[KingfisherINC]

Have you reviewed the code in checksession.csp in the Admin folder of Web Content?

Kingfisher [CECP]

 

[OzWolf]

Thanks for the prod Kingfisher. Considering the fact the directory was all sitting there and how I've used other code from the product to guide me, it should have been obvious.

Anyway, it didn't provide an exact solution because the token used there wouldn't work, however, I have found a workaround.

By reverse engineering the admin.cwr login page, I have done the following:

1) Created a hidden form with the username, password, authentication type and APS name that submits to admin.cwr?action=logon.
2) When somebody select the CMC, the hidden form is submitted, thus posting the login informations straight into the admin.cwr?action=logon page, I'm bypassing the need for them to manually re-enter their details.

While I wait on a possibly better solution with Business Objects, this fix will do.