Child pages
  • SSO Integration with MS Active Directory on IIS




Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

In order to activate App4legal LEXZUR SSO Integration with Microsoft Active Directory, the following configuration must be applied:

...

  1. Open Internet Information Services(IIS) Manager
  2. In the connection pane under “Server Name”, under “Sites”, under “Default Web Site”, select the correspondent application (i.e App4legalLEXZUR)
  3. After selecting the correspondent application IIS Manager middle pane will be titled by the selected application name containing different actions that can be performed on the application
  4. Select “Authentication”
    1. “Anonymous Authentication”: this option should be disabled
    2. “Windows Authentication”: this option should be enabled
  5. Open application folders tree
  6. Go to "webdav" and click on “Authentication”
    1. “Anonymous Authentication”: this option should be enabled
    2. “Windows Authentication”: this option should be disabled
  7. Go to "modules/api" and click on “Authentication”
    1. “Anonymous Authentication”: this option should be enabled
    2. “Windows Authentication”: this option should be disabled
  8. Go to "modules/outlook" and click on “Authentication”
    1. “Anonymous Authentication”: this option should be enabled
    2. “Windows Authentication”: this option should be disabled
  9. Go to "modules/A4G" and click on “Authentication”
    1. “Anonymous Authentication”: this option should be enabled
    2. “Windows Authentication”: this option should be disabled

...

  1. Open IE, open the settings button and select internet options
  2. Go to security tab, and select Local intranet as the configurable zone
  3. Click on the button labeled “Sites” local intranet dialog box appear, click on button labeled “Advanced” add App4legal LEXZUR server IP(or Name) as one of the local intranet sites make sure to set the right protocol (http, https), if App4legal LEXZUR instance is not configured with SSL make sure to uncheck the option “Require server verification (https:) for all sites in this zone”
  4. In internet option security tab also click on the button labeled “Custom level” a dialog box appear labeled “Security Settings – Local Intranet Zone” scroll to the bottom under section labeled “User Authentication” under “Logon” select the option labeled “Automatic  logon only in Intranet zone”
  5. In internet option go to “Advanced” tab, in the setting list under “Security” section make sure to enable the option labeled “Enable Integrated Windows Authentication*”

...