How to Configure Single Sign-On
Before accessing Enterprise Single Sign-On, you should make sure that Enterprise Single Sign-On is set correctly for the current user. For most configurations, you use one of two interfaces. ISSOAdmin is the general administration interface that enables you to create new affiliation applications. However, by using ISSOAdmin.GetGlobalInfo and ISSOAdmin.UpdateGlobalInfo, you can set a variety of flags and administration values. One possible task, as described in the following procedure, is to ensure that SSO ticketing has been enabled.
To enable ticketing
Create a new instance of
ISSOAdmin.Retrieve the current settings through
ISSOAdmin.GetGlobalInfo.If necessary, you may want to confirm that the flags are set to the correct values at this point.
Change any relevant flags using
ISSOAdmin.UpdateGlobalInfo.In this particular case, all the flags are being set to validate and enable tickets.
The following example shows how to enable ticketing using Single Sign-On.
public static bool EnableTickets()
{
try
{
ISSOAdmin admin=new ISSOAdmin();
int flags=0;
int appDeleteMax=1000;
int mappingDeleteMax=1000;
int ntpLookupMax=-1000;
int xplLookupMax=-1000;
int ticketTimeout=2;
int cacheTimeout=60;
string secretServer=null;
string ssoAdminGroup=null;
string affiliateAppMgrGroup=null;
// Get current default settings.
admin.GetGlobalInfo(out flags, out appDeleteMax, out mappingDeleteMax, out ntpLookupMax, out xplLookupMax, out ticketTimeout, out cacheTimeout, out secretServer, out ssoAdminGroup, out affiliateAppMgrGroup);
// Update global settings.
admin.UpdateGlobalInfo(SSOFlag.SSO_FLAG_ALLOW_TICKETS | SSOFlag.SSO_FLAG_VALIDATE_TICKETS, SSOFlag.SSO_FLAG_ALLOW_TICKETS | SSOFlag.SSO_FLAG_VALIDATE_TICKETS, ref appDeleteMax, ref mappingDeleteMax, ref ntpLookupMax, ref xplLookupMax, ref ticketTimeout, ref cacheTimeout, null, null, null);
}
catch
{
return false;
}
return true;
}