It's all about the answers!

Ask a question

Single sign on for Windows (Active Directory) and Liberty in ELM 7+

Dave Evans (14812846) | asked May 12 '21, 4:00 p.m.

Has anyone gotten SSO working between Microsoft Active Directory and ELM running on Liberty (version 20 is shipped with ELM 7.0.2)? I believe it is called "Integrated Windows Authentication" in the community, and in Eclipse, but is technically Kerberos/SPNEGO or negotiate authentication.

I have had it working in CLM 6.X running on WAS 8.5.5 for maybe the past 6 years, but we are thinking of migrating to Liberty when we upgrade to ELM 7, and am worried about a note in the help content that Liberty isn't supported for SPNEGO.

These instructions from Liberty's help contents look solid... but will they work with ELM?:

One answer

permanent link
Shubjit Naik (1.5k1613) | answered May 13 '21, 2:59 p.m.
edited May 13 '21, 3:00 p.m.

Hi Dave

Although it has not been tested and is marked as not supported, we have a few customers who are using SPNEGO/Kerberos with ELM on a WebSphere Liberty deployment.

Since majority of the configuration is on the underlying Application Server (Unless deployed with Jazz Authorization Server which is our OIDC solution) when ELM is configured with Liberty it would work similar to when it is configured with WAS Full profile. 

Best Regards

Your answer

Register or to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.