Hello all,

we are currently setting up SSO configuration for a client which is using a third party load balancer. We are experiencing problems with invoking SSO login. All the traffic is redirected from original url( let's say this is point X) to a different URL (point Y). Are there any articles about setting the filters for SSO with load balancer. Is this supported from WebSpheres side or does the client need to configure some settings from the load balancer side.

Please suggest or share documents if there is any solution related to above scenario

Regards
#AssetandFacilitiesManagement
#Maximo

Hi ,

What kind of SSO are you trying to achieve?
Can you please explain more on the redirect issue? Is Load balancer not able to redirect to the right Maximo JVM?

Thanks,
Biplab

------------------------------
Biplab Choudhury
Maximo Consultant
Tata Consultancy Services
Melbourne
------------------------------

Here is how we have implemented successfully.  Please provide more details as to what exactly the problem is.

https://www.ibm.com/support/pages/how-configure-sso-single-sign-maximo-76

------------------------------
Dinesh Shenoy
Maximo Consultant
Samagra
N/A
------------------------------

Assume you are using Microsoft AD for SSO, base on my previous experience
There are some different from using Loadbalancer and non-loadbalancer for SSO
1. The account for application server checked "This account supports Kerberos AES 128 bit encryption"


------------------------------
Jason Pun
Technical Consulant
Lexco
(852) 2332 3262
------------------------------

After changing the principal name, to point to load balancer adress and recreating the keytab file it works now. Also some other parameters were needed to be placed in the load balancer config.

Thank you for all answers

------------------------------
Jaka Mori
------------------------------

Original Message:
Sent: Thu July 09, 2020 01:52 AM
From: Jason Pun
Subject: Maximo SSO

Assume you are using Microsoft AD for SSO, base on my previous experience
There are some different from using Loadbalancer and non-loadbalancer for SSO
1. The account for application server checked "This account supports Kerberos AES 128 bit encryption"

2. The account for application checked "Trust this user for delegation to any service (Kerberos only)

3. change the Kerberos configure file for WebSphere point to loadbalance like below,
    assume maximo.abc.com is the maximo login address,
                 maximo.lb.abc.com is  loadbalancer address.

The other is same as normal, it should be work.

Regards,

------------------------------
Jason Pun
Technical Consulant
Lexco
(852) 2332 3262
------------------------------