[rt-users] RT4.0.1 ExternalAuth and SSO

Thomas Sibley trs at bestpractical.com
Mon Sep 19 09:21:57 EDT 2011


On 09/19/2011 04:51 AM, declaya wrote:
> 
> Hi all,
> 
> my RT installation is just a little step away from being absolutely perfect.
> 
> I'm currently trying to get a single sign-on behavior for all users in our
> network. 
> Until now, ExternalAuth is working fine, all users can log in with their
> credentials, they are recognized in our AD. My problem now is the SSO
> config. I have no idea what I have to set in the RT_SiteConfig.pm.
> As far as now my config looks like this:

For AD SSO, you very likely want to use mod_auth_krb or similar
commercial products to do the authentication at the Apache level.  RT
can then trust Apache's auth with the right configuration, and you won't
really need ExternalAuth anymore since RT has the WebExternalAuth settings.

Thomas



More information about the rt-users mailing list