What Is the Process for Configuring SSO Domains?
To configure an SSO domain, you must configure the following:
Step | Description |
---|---|
1 | Designate the primary service for the domain by setting the --isreference parameter to false for this service, using the secadm service command. Adding and Modifying Services |
2 | Map the primary server to the domain, using the secadm ssodomain servicessodomain command. Assigning Services to an SSO Domain |
3 | Designate the login procedure for the primary service, with the --loginprocedure parameter, using secadm loginscheme command. Adding or Updating Login Schemes |
4 | Map the login scheme to the primary service using the secadm service command. Adding and Modifying Services |
5 | Map the services that will be accessible to users to the domain, using the secadm ssodomain servicessodomain command. Assigning Services to an SSO Domain |
6 | Configure each service within the domain (other than the primary service) to reference the primary server by setting the --isreference parameter to true, using the secadm service command. Adding and Modifying Services |
7 | Map the HTTP endpoint for the application or web server that manages access to this domain, using the secadm httpendpoint update command. Adding HTTP Endpoints and Assigning to SSO Domains |
8 | Create HTTP endpoint groups, using the secadm httpendpoint httpendpointgroup add command. Adding HTTP Endpoint Groups |
9 | Assign endpoints to endpoint groups, using the secadm httpendpoint httpendpointgroup assign command. Assigning HTTP Endpoints to HTTP Endpoint Groups |
10 | Assign endpoints to services, using the secadm httpendpoint assign command. Assigning HTTP Endpoints to Services |