Expand all | Collapse all

Maximo SSO

  • 1.  Maximo SSO

    Posted Mon July 06, 2020 09:47 AM
    Hello all,

    we are currently setting up SSO configuration for a client which is using a third party load balancer. We are experiencing problems with invoking SSO login. All the traffic is redirected from original url( let's say this is point X) to a different URL (point Y). Are there any articles about setting the filters for SSO with load balancer. Is this supported from WebSpheres side or does the client need to configure some settings from the load balancer side.

    Please suggest or share documents if there is any solution related to above scenario


  • 2.  RE: Maximo SSO

    Posted Tue July 07, 2020 02:30 AM
    Hi ,

    What kind of SSO are you trying to achieve?
    Can you please explain more on the redirect issue? Is Load balancer not able to redirect to the right Maximo JVM?


    Biplab Choudhury
    Maximo Consultant
    Tata Consultancy Services

  • 3.  RE: Maximo SSO

    Posted Wed July 08, 2020 09:10 AM
    Here is how we have implemented successfully.  Please provide more details as to what exactly the problem is.

    Dinesh Shenoy
    Maximo Consultant

  • 4.  RE: Maximo SSO

    Posted Thu July 09, 2020 01:53 AM
    Assume you are using Microsoft AD for SSO, base on my previous experience
    There are some different from using Loadbalancer and non-loadbalancer for SSO
    1. The account for application server checked "This account supports Kerberos AES 128 bit encryption"

    2. The account for application checked "Trust this user for delegation to any service (Kerberos only)

    3. change the Kerberos configure file for WebSphere point to loadbalance like below,
        assume is the maximo login address,
            is  loadbalancer address.

    The other is same as normal, it should be work.


    Jason Pun
    Technical Consulant
    (852) 2332 3262

  • 5.  RE: Maximo SSO

    Posted Mon August 10, 2020 02:01 AM
    After changing the principal name, to point to load balancer adress and recreating the keytab file it works now. Also some other parameters were needed to be placed in the load balancer config.

    Thank you for all answers

    Jaka Mori