16 Single Sign-On for Lotus Domino

Lotus Domino is a server platform for messaging, collaboration, and applications. You can configure Domino impersonation that is similar to Windows impersonation on IIS.

This chapter discusses the following topic:

• Configuring Single Sign-On for Lotus Domino

16.1 Configuring Single Sign-On for Lotus Domino

By setting the remote_user header to the name of the authorized user using standard actions, you can configure Domino impersonation that is similar to Windows impersonation on IIS.

Domino uses its own user store. To provide single sign-on between the Access System and Domino, the Access System passes a header variable, remote_user, that contains the name of the user as it is contained in the Domino user store. The Access System looks up the user in the Domino user store, using both the long and short name stored there, and uses the preferred name defined by the Domino instance in the remote_user header.

Note:

On Lotus Domino v6, be sure that the Anonymous authentication radio button on the server/ports/internet ports/web page tab is disabled.

To configure single sign-on using a Lotus Domino Web server

1. Create an authorization rule, as described in the chapter on configuring authorization in the Oracle Access Manager Access System Administration Guide.

2. In the General screen displaying the authorization rule, click Actions.

   The Actions page appears.

3. Click Add.

4. Under Authorization Success:

   1. Type headervar in the first Type field.

   2. Type remote_user in the Name field.

   3. In the Return Attribute field, type the name of any attribute that identifies the user.

5. Click Save to save your changes (or click Cancel to exit the page without saving).