View Full Version: 8.0.3 Single Signon

LawsonTalk > Security > 8.0.3 Single Signon


Title: 8.0.3 Single Signon
Description: Aquiring single signon to Lawson Portal


chevesj - April 26, 2006 06:55 PM (GMT)
We are running 8.0.3 Financilas and HR/PR apps on HP servers under HP-UX 11.11 in the Lawson 8.0.3 ESP5 environment. We are running Apache 1.3.32 and Tomcat 4.0.6. We have integrated the LDAP module into our Apache. We also have a Company Portal running with Websphere 5. We have gotten out Lawson Portal 3.1 to authenticate through our Active Directory just like our Company Portal. But when we log into our company portal and click the Lawson link the logon page comes up. We are trying to find a way to pass the userid and password form our company portal login to our Lawson Portal without having to login to it.

LawsonsNbr1Fan - April 26, 2006 07:08 PM (GMT)
Care to share how you did this:
"We have integrated the LDAP module into our Apache."

chevesj - April 26, 2006 07:35 PM (GMT)
When you say integrated - were you successful or are you having issues with it?
If so, what are the issues?

Phil Feller - April 26, 2006 10:11 PM (GMT)
Lawson Portal uses Basic authentication. As long as the users' browser knows that it needs to reurn these credentials for any request to the security realm used for /cgi-lawson and /servlet. You might be able to get your company Potal to do the same type of AJAXish XMLHttpRequest to /servlet/Profile that /lawson/portal/logon.html does.

schroncd - April 27, 2006 02:26 AM (GMT)
I have to agree with Phil (we usually do) - your call to http://servername/lawson/portal calls the index.htm file which just displays that login screen. If you get into the login behind it and redirect the call to ~/servlet/Profile and the other servlets that get loaded you might bypass the login screen.

If you did some javascript testing on the frontnd you might be able to bypass it if the appropriate variables are already set, but be careful - doing that might also open you up to a security issue by anyone who knows how to reset their own variables.



Hosted for free by InvisionFree