Single Sign-On (on-premise)

Overview

Single sign-on uses the Windows Active Directory to allow a user to by-pass the Login screen using their Windows credentials. When using single sign-on, it’s important to note the following:

1. The user currently logged into Windows is the single sign-on user.
2. SSO only works from a Windows computer that is logged into the same domain as the LobbyCentral web server.

Configuring Single Sign-On

Before making these changes, be sure that all users are logged out of LobbyCentral.

1. Log into Service Center Web with an administrator account.
2. Click Tools, Administration.
3. In the left menu, click System Options.
4. On the Settings tab, enable the box marked ‚Use Single Sign-On.
5. Click Save.

Next, you must configure IIS on the web server to use Windows Authentication.

Windows 2003

1. Open IIS.
2. Under Web Sites, expand the Default Web site.
3. Right click serviceCenterWeb and choose Properties.
4. Click the Directory Security tab.
5. In Authentication and Access Control, click Edit.
6. Uncheck ‚Enabled Anonymous Access‛
7. Check Integrated Windows Authentication‛
8. Click OK.
9. Click OK to close the properties window.
10. Close IIS.

Windows 2008 or Higher

1. Open IIS.
2. Open Sites and select Default Web site.
3. Click serviceCenterWeb
4. In the Features view, double-click Authentication.
5. On the Authentication page, select Windows Authentication.
6. In the Actions pane, click Enable.
7. Select Anonymous Authentication.
8. Click Disable.
9. Save and close IIS.

IMPORTANT: The web server must be in the same domain as the user’s domain. Users must be allowed to access the web server. If not, they will be prompted for a Windows login when accessing the application.

Now that SSO has been enabled, you will need to configure each user account to add the user’s Window’s login:

1. Go to User Management.
2. Select a user from the list and click Modify.
3. In Windows Login, type in the user’s login with domain. For example: CORP\JSMITH
4. Click Save.

Logging In

Users should access Service Center Web as they have in the past. When the user accesses the page, it will detect their Windows login and authenticate it against LobbyCentral’s user database.

• If the Windows login is found, the user is taken directly to the Queue Monitoring page.
• If the Windows login is not found, the user will be taken to the Login page. From here the user can use a LobbyCentral Authentication to log in, or use another domain username and password.

One-Click Login

When the user logs out of Service Center Web, they will be taken to the Login page. When the user wishes to log in, they will simply click the One Click Login button. The One Click Login will retrieve the current user’s login.

Logging In As A Different Domain User

If the user wishes to log into Service Center Web with an account other than the current Windows login, click the Logout link to go back to the Login page.

At the login page, type in the domain user’s name and password. If the Windows login is found and the password matches the domain user’s password, the user will be allowed to continue.