Auto connect user with SSO in iframe

Brendan Broughton

When opening a capsule from a command line it is possible to control the server/host, capsule and screen to be opened, along with telling it to 'auto-connect' using either /username and /password, or the /sso switch as described here help.board.com

 

When embedding via iframe it is possible to also set the capsule/screen, but I'm wondering if there is an way for the user to auto-connect using sso/windows account.  This KB article (KB Article) doesn't mention it so I'm not sure if it is possible or not.

 

Below is what currently pops-up to login, and we're wanting to see if this can be avoided.

 

 

Any help is appreciated.

Björn Reuber

Hi,

 

it's quite easy, you only have to disable localAuthEnabled [ <add key="localAuthEnabled" value="false" />] in Web API Config ("C:\Program Files (x86)\Board\Board WebApi Server\App_Data\config\appSettings.config")

 

Afterwards SSO will be directly being executed.

 

regards

Björn

Fabio Donatellis

Hi Brendan Broughton

 

Integrated authentication works when it is the only option available.
If the server allows different authentication methods, it is necessary to display the authentication pop-up to allow users to choose how to access the system.

 

In appSettings.config you can configure the authentication methods allowed.

 

Fabio

Brendan Broughton

Hi Björn Reuber and Fabio Donatellis, a related question.  Now that I know SSO auto-connect is possible I need to demonstrate this to a potential client (by sending a link to a temp mockedup webpage), but the obvious issue here is they won't be able to use SSO/autoconnect.

 

So I'm wondering if there is a way to hardcode the username/pword into the iframe somehow so that they won't have to log-in, and it will auto connect with the specified credentials.

 

One of their concerns/queries was about having everything auto-connect etc, hence trying to bypass their need to 'log-in'.

 

 

Thanks

Fabio Donatellis

Hi Brendan Broughton

 

You can use authentication with an anonymous user. In this way, all users will be connected using the same user/security/profile.  

 

In this way you can show Board functionality, but you can not show integrated authentication.

So, you can have different configurations depending on which functions you want to show.

 

Remember that the anonymous user requires an Unlimited license.

 

Regards

Fabio

Brendan Broughton

Hi Fabio Donatellis, yes I am aware of the anonymous user/unlimited license and have gone through this discussion with our BOARD rep before, but we don't have an unlimited license as a partner which is why I was wondering about hardcoding a single user purely for demonstration purposes.

 

I take it hardcoding a user is not possible then.