Single Sign On

[rickson]

I wonder if this ever got fully integrated? I have a realated but slightly different request. Provided every zimbra account matches the username on our employees AD accounts, can I somehow forgo authentication when that user browses to our zimbra url?

I have this setup with Squid to use winbind and take current active credentials and match against the AD catalog, if it does - no additional login and it just works. Will the preauth/external auth options in zimbra allow this kind of functionality??

We just installed an intranet, and I would like to establish SSO to that site, and have credentials carried over when clicking into a link to our zimbra mail. This would be ideal since each user has their own system and has to auth against the AD when they boot up in the morning anyway.

How did this project go?, im looking to make the same thing, when the desktop user log in against the AD in the moring, they should not have to type the username/password all the time.

Anyone else, who have manage to fix some similar sso, feel free to tell me.

[Hivos]

This would probably be useful:

Preauth - Zimbra :: Wiki

[rickson]

So, with that solution, you modify and compile that java program, and then put it on the users Desktop?

[Klug]

Vote for this : Bug 6062 - Single Signon and Kerberos support for Web UI (SPNEGO)

[rickson]

ok, sounds like a good idea

[rickson]

So, correct me if im wrong. But as far as i have understod there is currently no way to just have the windows users log on the AD, let them open explorer type in the normal adress (mail.test.com) and come direct to their inbox without doing other stuff manually to their computer?

[Hivos]

So, correct me if im wrong. But as far as i have understod there is currently no way to just have the windows users log on the AD, let them open explorer type in the normal adress (mail.test.com) and come direct to their inbox without doing other stuff manually to their computer?

The java app from the wiki link I gave earlier comes quite close as I understand it.
"This program fetches the Windows login name and uses it to construct the preauth URL, open the default web browser, and autologin to the Zimbra server."

[rickson]

Hmm, i guess you could put some settings/script in the AD that put the java app on the desktop.
Any other smart idea?

[rickson]

to the top

[Hivos]

You could create a shortcut on the desktop via netlogon, or even have it autostarted. Plenty of options once you have the java program in place.