Content Management and Capture

According information from one of our customers IBM improved the behavior of Edit Service Client SSO in NES 3.0.13-IF001 from Jan 26^th 2023 (use of common cookie Navigator and NES…).

According "What's new in IBM Content Navigator 3.0.14" there is since 3.0.14 a new authentication behavior of the Edit Service client (Edit Service client does not require users to authenticate again if they already authenticated through the IBM Content Navigator browser). What does this mean? Have there been additional changes to the SSO behavior since NES 3.0.13-IF001? If yes: what has changed?

Is there any documentation available about the SSO behavior of Edit Service Client?

Hi Paul, the only doc available to this per my knowledge is the section in What's New https://www.ibm.com/docs/en/content-navigator/3.0.14?topic=navigator-whats-new-in-content-3014 

I did not find this documented for the 3.0.13IF1 or later; I assume you might want to raise a case if you want to be more specific.

There isn't a whole lot to say about the new feature...

• With this authentication improvement, once the user successfully authenticates through ICN web, he is no longer required to authenticate again when using the Edit Service client.
• This feature enhancement applies to both Single Sign-On (SSO) environments and non-SSO environments for Edit Services.

And as noted in the What's New section, these are the special cases where authentication is still required from the Edit Service client.

• A custom Identity Provider (IdP) server is used, which applies a token exchange mechanism during authentication.
• When the Edit Service client is started after the user already authenticated in IBM Content Navigator from the browser. In this situation, the user needs to refresh the browser page to allow the web to send the authentication token to the Edit client again. If the user does not refresh the browser, the Edit client resorts to the previous method of authentication and opens an authentication window.
• A custom certificate is used and the password for the custom certificate is stored in the IBM Content Navigator database. In this case, the Edit client needs to retrieve the custom certificate password from the IBM Content Navigator database upon launch. This retrieval process requires authentication.
• A user has unsaved document changes to the local workstation that results from a lost network connection or from other reasons. The network becomes online and tries to upload the unsaved changes.