Re: IBM EIM SSO

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

The 2nd article is curious - when I worked on SSO with the ISV support 
team, nothing like this was done - the only thing we did using the NAS 
wizard had us send a batch file that did the server entries only, IIRC.

In our case we were enabling SSO in an application - but also in the web 
browser - so we accepted the tickets from Windows authentication, and we 
did not have to add anyone to AD. The mapping of EIM took care of 
things, we did not use an IBM user name as the Windows principal.

There was a how-to on developerworks that I can't find right now - maybe 
the remove things after a while.

Vern

On 3/28/2019 2:08 PM, Monty G. James wrote:
> After posting a few utilities to aid with EIM, I received an off list inquiry asking for help in setting up EIM and SSO.
>
> Keeping with the spirit of the list I am posting my suggestions here rather than in a private email, to the individual that sent me the inquiry I will send this info to you directly.
>
> If you don’t have a need or desire to learn everything about EIM and SSO the following information should get you setup and running in a Window AD environment.
>
> Familiarize yourself with all of documentation before starting.
>
> This is the best IBM document I know of for prep, configuration and validation:
> https://www-01.ibm.com/support/docview.wss?uid=nas8N1012326
>
> You should not skip any steps in the previous document with one possible exception which is explained in this document:
> https://www-01.ibm.com/support/docview.wss?uid=nas8N1010920
>
> The utilities posted earlier should help with the management after the configuration is complete.
>
>
>
> ________________________________
>
> This email message, including any attachment(s) is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is strictly prohibited. If you are not the intended recipient, please immediately contact the sender by email.