Configuring Single Sign-On

This guide will lead you through an advanced configuration to enable Single Sign-On functionality with Files Advanced.

Note: Single Sign-On is only usable in a working domain.

Note: Single Sign-On does NOT work when you are running Files Advanced in a single port configuration (when the Gateway Server is proxying the requests for the Files Advanced server).

Note: Single Sign-On does NOT work if Files Advanced is installed on the Domain Controller. In addition, even disregarding the SSO limitations, it is highly recommended for performance reasons that the Files Advanced server not be installed on a Domain Controller.

The Single Sign-On functionality allows all valid LDAP users to login to the web interface and desktop client without having to enter their credentials. The user must have an Files Advanced account or LDAP Provisioning must be enabled on the server.

• Files Advanced displays a link on the login page that will log in the user with the account that was used to login into this computer.

  Note: You have to open the Files Advanced interface using its FQDN (e.g. https://access.company.com) for SSO to work. Single Sign-on does NOT work if you open the interface via IP address.

• For the Desktop Client, there is a new radio button that enables SSO. The users will only have to enter the Files Advanced server's URL. It will automatically log them in with the account that they have used to login into the computer.

  Note: This will work only for the Windows client. Mac support will come in a follow-up release.