Setting up SSO with AD

Sort:
You are not authorized to post a reply.
Author
Messages
shashank
Basic Member
Posts: 7
Basic Member

    Could someone please point me to some docs on setting up SSO using AD.

    We've done our upgrade from 7.2 to 9.0.

    We didn't do the SSO with AD during the upgrade, but we'd like to do it now.

    I couldn't find any docs on Lawson Support that describe the process.

    thanks.

     

    John Henley
    Posts: 3352
      Re: Setting up SSO with AD (039153d5-d3ec-468a-91a3-d1e4370df485) <!-- Converted from text/plain format -->

      You use a process called ldapbind to make Lawson SSO authenticate against AD. You specify a tree in which to search (by username) and give a username/password which has rights to do the query. I'm simplifying, but that's really all there is to it.
      John Henley

      Thanks for using the LawsonGuru.com forums!
      John
      Roger French
      Veteran Member
      Posts: 545
      Veteran Member

        There is a little bit of info in the Resources and Security manaual available from Support. Of course they tell don't tell you how it works and how to do it really. They direct you to LPS.

        I did find a little info in the one of the 8.1 manuals.

        Just one thing too I have found after doing the ldapbind which might be helpful. When you load user records using loadusers, if you choose the domain option it will auto create the environment identities for those users too, as well as the SSOP identities.On WIndows: Your users' SID's and UID's may be off though when you try to copying/converting (if you are copying/converting) laua security from 803 environment.

        Roger

        John Henley
        Posts: 3352
          Also, there is an ldapbind option 'are your users located in multiple LDAP containers'. From what I've seen and heard, you always need to answer YES, even if it's not true...the NO option doesn't work...
          Thanks for using the LawsonGuru.com forums!
          John
          You are not authorized to post a reply.