Hi,

Scenario will be: New User attempt SSO(Assume New User only have SSO s far) > Then their is WebFOCUS button/link can be click to redirect to WebFOCUS by creating default permission to this new user via API. Therefore, WebbFOCUS's Admin. does not need to create for this New User.

any idea or it is possible?

This message has been edited. Last edited by: FP Mod Chuck,

Hi,

And is it possible to do SSO via JSON with WebFOCUS?

all document that I can find only using RESTful Web Service...

Nox

As long the the SSO user is defined to an LDAP group assigned to a WebFOCUS security group the user will be automatically added to WebFOCUS see the security guide for setting this up.

Hi Chuck,

Thanks for the reply.

Sound great for having be able to Connect WebFOCUS through SSO 'automatically' (assume user can be defined to LDAP group).
still try find out how this 'automatically' can be setup if SSO is using JSON to authenticate user?

We are SSO. We use Kerberos to pass the user id from the browser to WebFOCUS. WebFOCUS authenticates with LDAP through the Reporting Server. New users are automatically created and given the proper permissions in WebFOCUS. Other than defining a user in WebFOCUS, we don't use WebFOCUS security. Our security for Reporting was developed long before the current WebFOCUS security model and it works just fine. It is 100% automatic as long as LDAP is correct for the user and the user is set up properly in the desktop application. All users (except admins and developers) are in 1 WebFOCUS group. This works because we don't allow users to create WebFOCUS reports, everything is developed by WebFOCUS developers.