bypass Web GUI SSO with machines not connected to domain

Question

Hi,

is there any way to bypass SSO and get directly to the Loginpage when a machine is not joined to the domain?

Reason why I'm asking is, in the last months we had a couple of acquisitions, all users in the sites have got domain accounts but while we are in the phase of standardization not every machine is joined to the domain. Here comes the issue, when a user tries to enter the SelfService page, which is setup with SSO, he get's prompted for his AD credentials, after entering he's redirected to the login page and needs to enter his credentials again, first login window appears to be from the MS Internet Explorer, second one is the normal Adaxes Page.

As this is very inconvenient for our users, I was wondering if there is any configuration that would allow machines not connected to the domain to go directly to the Adaxes Login form.

Best regards
Ingemar

Answer 1

Hello Ingemar,

Adaxes uses Kerberos authentication for SSO, and it is not possible to set up an IIS Web Application to use and not use Kerberos authentication at the same time. To workaround this, you can create one more Web Interface that will be completely identical to the Self-Service Web Interface, but with SSO disabled. To do this:

1. Launch the Web Interface Configuration tool.
2. Expand the Interface type drop-down list.
3. Click New.
   
4. In the New Web interface dialog box, to make the new Web interface copy all settings of the Web interface for Self-Service, select the Web interface for Self-Service in the Copy settings from drop-down list.
   
5. Enter a name for the new Web interface type, choose an IIS Web site where you want to create it and click OK.
6. When the Web Interface Configuration tool finishes creating the Web Interface, the Web Interface type will be automatically switched to the new Web Interface type. Activate the Sign In tab.
7. Click Disable Automatic Logon.