Trusted Authentication
Trusted Authentication relies on a reverse proxy to authenticate users. A user’s identity is passed through to SD Elements within incoming HTTP headers.
Configure Trusted Authentication for Single Sign-on
Follow the steps below to configure Trusted Authentication for Single Sign-on.
| This is not a secure SSO method unless all traffic going into SDE is intercepted by a trusted server (such as a proxy) which verifies that all requests are authenticated. Otherwise this allows anyone to set the header in an HTTP request and authenticate themselves. |
-
The application user is a Super User.
-
Trusted Authentication Information
-
Email address: The name of the header containing a user’s email address
-
First name: The name of the header containing a user’s first name.
-
Last name: The name of the header containing a user’s last name.
-
Login URL: Location where unauthenticated should be redirected.
-
Logout URL: Location where users are redirected upon logout.
-
-
Login to the SD Elements web application
-
From the gear icon menu, select Authentication.
-
Select option "Trusted Authentication" for SSO Type
-
Update the fields using the Trusted Authentication Information.
-
Click Save
The server is now setup to authenticate users using Trusted Authentication.