[rt-users] RT4.0.1 ExternalAuth and SSO

[Thomas Sibley]

On 09/19/2011 04:51 AM, declaya wrote:
> 
> Hi all,
> 
> my RT installation is just a little step away from being absolutely perfect.
> 
> I'm currently trying to get a single sign-on behavior for all users in our
> network. 
> Until now, ExternalAuth is working fine, all users can log in with their
> credentials, they are recognized in our AD. My problem now is the SSO
> config. I have no idea what I have to set in the RT_SiteConfig.pm.
> As far as now my config looks like this:

For AD SSO, you very likely want to use mod_auth_krb or similar
commercial products to do the authentication at the Apache level.  RT
can then trust Apache's auth with the right configuration, and you won't
really need ExternalAuth anymore since RT has the WebExternalAuth settings.

Thomas