Single sign-on for client

[wdssnyder]

Company using thick client v9.5.0.3. Is there any version of thick client, where single sign-on is available?

[Justin Derrick]

As far as I know, SSO is only supported on ICN.  And just a reminder that you�re REALLLY far back on fixpacks. ;) 

[jsquizz]

I am very interested in this as well.

I tried this with a client as well back in 2015, and after working with with IBM we were under the impression that we COULD do it with the thick AND admin client!

[wdssnyder]

Question: Thick client - menu bar - Options - has View Combined Documents. Does ICN client perform the 'View Combined Documents' Options feature?

[Ed_Arnold]

I got this from a colleague:

SSO is supported between CMOD and ICN as of 10.1.0.3 and ICN 3.0.4.

Please refer to the following document.

https://www-01.ibm.com/support/docview.wss?uid=ibm10713479

Ed

[rjrussel]

The cliff notes answer is that the Windows Client does not natively support SSO. You would have to develop a custom security exit and pass some information to the arsgui.exe at startup using the /u username and /p password switches.

-RR

[Lars Bencze]

We have built a "SSO ready" solution for a customer (custom arsusec exit). I write "SSO ready", since the customer has STILL not implemented a SSO solution (I think they are considering Kerberos).
If and when they do, our solution will accept a ticket as an input parameter, and this ticket will be verified vs the whatsitcalledthingamy-"ticket dispensing server" or whatnot. Today, we have a simpler algorithm in place for handling this (as they don't have any "real" tickets), and our solution works with the same number of parameters. ITs just the content today that is not real SSO.

So yes, it should be quite doable.