Configuring Single Sign-on through IIS

This option uses Microsoft IIS web server. This option requires no additional setup as long as you used the Management and Security Server automated installer and chose to integrate with IIS during the installation process. You can find more information on install configurations in the Management and Security Server Installation Guide.

Enabling Reflection ZFE for use with single sign-on through IIS

To enable Reflection ZFE to work with this authentication method, add the following property in the <install dir>/sessionserver/conf/container.properties file:

management.server.iis.url=<url>

The value of this property is the IIS web server address and port along with the / MSS path. For example: http://server/mss. The host name should be specified without the domain name in order for the domain credentials to be passed to IIS.

If you plan to proxy Reflection ZFE through IIS, when using IIS single sign-on, you need to set an additional property in the same container.properties file:

servletengine.iis.url=<url>

The value takes the same form as the URL above, but uses the Reflection ZFE address. For example: http://server/zfe. It is not necessary to use the short host name form in this URL. See Using the IIS Reverse Proxy with Reflection ZFE for more information.

After you have completed this configuration, you choose this authentication option in Management and Security Server Administrative Console | Assign Access. See the Administrative Console online help for descriptions of the configuration options.