Single sign on for Windows (Active Directory) and Liberty in ELM 7+
Has anyone gotten SSO working between Microsoft Active Directory and ELM running on Liberty (version 20 is shipped with ELM 7.0.2)? I believe it is called "Integrated Windows Authentication" in the community, and in Eclipse, but is technically Kerberos/SPNEGO or negotiate authentication.
I have had it working in CLM 6.X running on WAS 8.5.5 for maybe the past 6 years, but we are thinking of migrating to Liberty when we upgrade to ELM 7, and am worried about a note in the help content that Liberty isn't supported for SPNEGO.
These instructions from Liberty's help contents look solid... but will they work with ELM?:
One answer
Hi Dave
Although it has not been tested and is marked as not supported, we have a few customers who are using SPNEGO/Kerberos with ELM on a WebSphere Liberty deployment.
Since majority of the configuration is on the underlying Application Server (Unless deployed with Jazz Authorization Server which is our OIDC solution) when ELM is configured with Liberty it would work similar to when it is configured with WAS Full profile.
Best Regards
Shubjit