Authentication on OpenAccess Dashboards when SSO enabled

Dashboard Server
, , ,
1

Hi,

We enabeled SSO/windows authentication yesterday. This morning i noticed that our wall monitors displayed a login box. These screens display a few squaredup open access dashboards, which with forms authentication just worked.

The computer running these screens is using firefox, adding squaredup url to the FF config makes the user authenticate.
No license are being used.

2

Hi!

We encountered the same problem when we activated Windows Authentication, and the solution for us was to verify the authorization-rules in web.config. Try changing your web.config to resemble something similar to this (the most important rule to verify anonymous access to would be for the path “OpenAccess”):

 

  <location path="UserContentStorage">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
  </location>
  <location path="OpenAccess">
    <system.web>
      <authorization>
        <allow users="?" />
      </authorization>
    </system.web>
  </location>
  <location path="Content">
    <system.web>
      <authorization>
        <allow users="?" />
        <allow users="*" />
      </authorization>
    </system.web>
  </location>
  <location path="Scripts">
    <system.web>
      <authorization>
        <allow users="?" />
        <allow users="*" />
      </authorization>
    </system.web>
  </location>
1 Like
3

Have you checked whether you have anonymous authentication disabled on your Squared Up server? This needs to be enabled in order to bypass authentication. I disabled this as a test and received the same issue as you described above. You can check this via:

-> IIS

-> Squared Up application

-> Authentication

4

Thank you, i checked OA section, and it seems to be the same as yours,

5

Do you allow anonymous to “Content” and “Scripts” as well? If you check what sources the browser access when you open a OA dashboard it should be all three folders.

6

Yep, this is my location config

7

I willl take a look. We’re back to forms at the moment, but are trying to switch to kerberos again shortly

8

Whichever authentication you have enabled i.e. windows or forms make sure that you have anonymous enabled as well as this bypasses authentication for open access.