SSO Login

SSO authentication is possible in TermWeb with the following properties:


# Specifies the URL for the LDAP service provider to use if client and/or group is to be retrieved via JNDI.
login.ldap.url=<LDAP URL>
# Specifies the user id for LDAP authentication.
login.ldap.principal=
# Specifies the password for LDAP authentication.
login.ldap.credentials=
# Root node in LDAP from which to search for users, clients and groups.
login.ldap.basedn=

# Specifies an LDAP filter for retrieving the user object
# This property can use the variables ${userLogin} and ${clientLogin}.
# Default: null
login.ldap.user.filter=

# Specifies the name of the attribute in the LDAP user object, which contains the group name
login.ldap.user.group.name.attribute=
# Specifies the name of the attribute in the LDAP user object, which contains the group ID
login.ldap.user.group.id.attribute=

# Specifies an LDAP filter for retrieving the client object, in case that the client attribute in the
# user object does not specify the client login name
# This property can use the variables ${userLogin} and ${clientLogin} which will be replaced by the user name and client login
# (retrieved from user object) repectively in the search.
# Default: null
login.ldap.client.filter=

# Specifies the name of the attribute in the LDAP client object, which contains the client ID
login.ldap.client.id.attribute=

# Specifies an LDAP filter for retrieving the group object, in case that the group name is not specified directly in the
# user object.
# This property can use the variables ${userLogin}, ${groupName}, ${groupID} and ${client} which will be replaced by the user name
# group ID, and client ID repectively in the search.
# Default: null
login.ldap.group.filter=

# Specifies the name of the attribute in the LDAP group object, which contains the group login name
login.ldap.group.name.attribute=

When using SSO, the user authenticates in an intranet and the SSO service provider uses this information to authenticate the user to TermWeb.
In this case if the user does not exist in TermWeb, he/she gets created automatically.