TG Web and SSO

SSO Scenario

Q: Most of our users have smart cards for login and don’t know their passwords.  Is there a way to setup Apache for single sign on where the user isn’t prompted for a username and password?  

In addition can the workstation application be setup for single sign on for the instructors? 

Instructions

1_ Download and install this utility: 
http://tomcatiis.riaforge.org/index.cfm?event=action.download 
Note that during the install it will ask you whether you want to install this on ALL sites (default) or specific sites.  You'll want this for specific sites since otherwise it will send everything to Tomcat for all sites.  Also keep in mind that once you apply this for a given site, all content from that site will be served through Tomcat. 

Important - Make sure on the "Select Handler Mapping" step of the installation wizard, select "Servlet (add a wildcard reference and pass all traffic to tomcat)"

2_ Make sure the Windows Authentication Feature is installed (through Add/Remove Features -> Internet Information Services -> World Wide Web Services -> Security)

3_ Make sure the ASP.NET<http://ASP.NET> feature is installed (through Add/Remove Features -> Internet Information Services -> World Wide Web Services -> Application Development Features) 

4_ In IIS, make sure the site you want this to apply this to has Windows Authentication enabled (and Anonymous disabled) -> click on the site - then click Authentication 

5_ Edit tomcat/conf/server.xml and look for a line that looks like this: 
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" /> 
Add tomcatAuthentication="false" to it so it looks like this: 
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" tomcatAuthentication="false" /> 

Then stop/start Tomcat

6_ Add a file called whoami.jsp under tomcat/webapps/tester and put in the following:  
<%
out.println(request.getRemoteUser());
%> 

7_ Open up a browser and go to /tester/whoami.jsp through the IIS site, it should display the username that you're logged in as

8_ Go to /tester/login_sso - it should log you right in assuming your username is set up in TG.

If you need additional assistance, please email support@testshop.com