Implementing single sign-on in iServer

averma

This article uses an example to illustrates the concept of how an external web application might implement single sign-on with iServer Information Console application. The example builds upon simple RSSE implementation as discussed in the following devshare article:<br />
<br />
Sample RSSE implementation to externalize User Registration and Authentication<br />
Setup Instructions:

<br />
1. Follow the instructions from the above link to set up a custom RSSE application.<br />
2. Deploy ExampleCorp.war in a servlet container like Tomcat. This would serve as a external application.<br />
3. Shut down iServer service.<br />
4. Copy Security Adapter implementation (ExampleCorpSSO.jar) to Information Console library [InstallDir]Actuate10/iServer/servletcontainer/iportal/WEB-INF/lib. (The library contains source code for the implementation as well)<br />
5. Create a folder [InstallDir]/Actuate10/data and copy users.txt file to this location. This file would be leveraged by security adapter to authenticate users and log into Information Console<br />
6. Copy sso_page.jsp to Information Console deployment location: [InstallDir]/Actuate10/iServer/servletcontainer/iportal. (ExampleCorp application forwards the request to this page with a security token as a parameter. The servlet stores this token in the session, which is later leveraged by security adapter)<br />
7. Change param value for SECURITY_ADAPTER_CLASS in [InstallDir]/Actuate10/iServer/servletcontainer/iportal/WEB-INF/web.xml to com.examplecorp.ExampleCorpSecurityAdapter<br />
8. Restart iServer service.<br />

<br />
Now launch a web browser and visit the ExampleCorp application: e.g.<br />
http://localhost:8080/ExampleCorp<br />
Use birt/welcome to login and on the next screen click on the hyperlink “Go to Actuate Information Console”. This will take you straight to the folderitems page without requiring the user to login into Information Console.<br />
<br />
Ashwini Verma