Enabling SSO with External Authentication

Use the following procedure to enable OneData SSO by using an external system to authenticate users.

To enable SSO with external authentication

1. Use the following syntax to redirect the URL to OneData: http://<server url: port>/<application context>/SSORedirectorServlet.

2. Navigate to the directory, Software AG directory\profiles\ODE\bin\onedata\config and follow these steps:

a. Open the onedata.properties file.

b. Set the value of onedata.security.authentication.sso.type to pluggable_SSO.

c. In onedata.sso.userid.header, enter the key that OneData must use to get the username from the request header after external authentication is complete.

d. In onedata.sso.logout.uri, enter the URL to which the user must be directed after logging out of OneData.

If you comment out this property, OneData redirects the browser to the login page after the user exits the OneData.

If you do not comment out this property, OneData redirects the browser to the URL specified in the onedata.sso.logout.uri property.

e. Save and close the file.

3. Enable external authentication in OneData as follows:

a. On the Menu toolbar, click Administer > System > System Properties.

b. In the Authentication properties, select External Authentication Enabled.

The Forgot your password link is not displayed in the login page.

c. Repeat the previous steps in every repository registered in OneData.