SSO with AD

[ptc-1834940]

Hi all,

We need to implement SSO technology between Microsoft AD and Windchill PDMLink. Our Windchill server is running on a Windows 2003 Enterprise Server box using Apache. Has anyone accomplished this or have any suggestions?

Thanks in advance!

[sauls]

Bruce,

Try the attached document for AD setup.

If you want to set windchill not to ask for login for somebody already
logged in at OS levels using the same credentials

The Windchill Advance Deployment Guide has some guidance to fix this issue.

(

[jessh]

Unfortunately the Apache module used to provide NTLM support does not
work properly when the client is Microsoft Internet Explorer (MSIE).

This is because this MSIE does some bizarre things when dealing with
NTLM that prevent a normal, straightforward Apache authentication module
from working.

If you want NTLM with Firefox, Java, and other non-MSIE clients, then
the Apache module is fine, but in the likely event that you actually
want it to work with MSIE clients, this module will not work.

This documentation and module have been removed from later versions of
the guide for this reason as there's no fix for the module.

I believe there are commercial authentication plug-ins for Apache that
provide NTLM support that /does/ work with MSIE (as I believe some
customers are using this approach), but you'd need to investigate this
-- or use IIS.

--
Jess Holle