Legacy SSO support leveraging Active Directory Integrated Authentication

Single Sign On against AD

Feature not available for Imagicle UC Cloud suite

IAS supports Single Sign On (SSO), that is, automatic authentication to the web interface using the Windows domain user.

SSO requirements:

• Edge, Firefox or Chrome web browsers
• The UC Suite server and the client PC must belong to the same Windows Domain
• In Active Directory, the user Principal Name must be equal to the ssamAccountName

To enable Single Sign On:

• Make sure UC Suite users have both Active Directory Username and the Domain fields populated. You can set them through the Users Management web page and within Synch Rules.
• Under Admin ⇒ System Parameters ⇒ User Authentication settings, select "Active Directory/LDAP -> UC Suite"

To log in trough Single Sign On, users must enter the following link in web browser:

http://Server_IAS/fw/Autologin.asp

If authentication fails you get redirected to the standard login page. In this case, please check that the server is joint to the right domain, that you can ping the domain controller from the UC Suite server, and that the above requirements are met.

Note:
1. By default, web browser identifies a Web site or a share as in the Internet zone, when the URL is an IP address or a FQDN containing periods.

2. By default, web browser allows autologon only in Local intranet sites.

So, to have SSO working you have three ways:

1. Connect to UC Suite using the hostname, like: http://ias/fw/autologin.asp

2. Connect to UC Suite using FQDN (ucs.imagicle.com) or IP address, and add it to the Local intranet zone:
    Tools ⇒ Internet options ⇒ Security ⇒ Local intranet ⇒ Sites ⇒ Advanced ⇒ http://<IP_or_FQDN>/ ⇒ Add

3. Connect to UC Suite using any option and change the security level of the Internet zone:
    Tools ⇒ Internet options ⇒ Security ⇒ Internet ⇒ Custom level ⇒ User Authentication ⇒ Logon ⇒
    Automatic logon only in Intranet zone ⇒ Automatic logon with current user name and password