05-01-2013 09:55 AM
Hello, excuse me, I dont’ very well English,
I try activate SSO for BlackBerry device users to access intranet (http://s1-univ-url.compagy.lan/bes) using BlackBerry devices without requiring the users to type a user name and password each time the access the intranet sites. I configure the BlackBerry MDS connection service to support Integrated Windows authentification.
But I was able to do for Intranet websites is to just have the domain pre-entered during login, the user has then to enter the password if he has checked to remember the username, but haven't achieved single sign-on. From what I've read this is not possible expect if you follow the other KB article that prompts you to delegate access to a site which in my case is not really applicable since we are talking about many sites (http://docs.blackberry.com/en/admin/deliverables/1
To just have the domain pre-entered in the authentication popup but the users then have to enter their password everytime.
I tested from computer (Windows 7) in active domain for access to the intranet site (htt://s1-univ-url.compagy.lan/bes) and SSO success (Auto Logon). Why SSO does not work since the blackberry terminal ?
If anyone had better luck with AD authentication I would also be glad to hear it please.
Active directory (Windows 2003 R2 SP2) forest: Windows 2003 R2.
Adresse IP: 10.0.2.245
Service Account: s1-srv
SPN for service account: HTTP/ s1-univ-url.compagy.lan
DNS record TYPE A: s1-univ-url : 10.0.2.244
Web server (Windows 2008 R2, IIS 7)
@ IP: 10.0.2.244
Account Pool application: s1-srv
Integrated Windows® authentication
Anonymous Authentification : OFF
BlackBerry MDS Connection Service
Service Account : sso-bes-srv
Procedding in active directory
Then I followed the procedure. http://docs.blackberry.com/en/admin/deliverables/1
Can you help me please because I Despere
thank you in advance
05-13-2013 08:35 AM
Please refer to the following regarding single sign on access:
Allow devices to have single sign-on access to your organization's network (Page 90) - http://docs.blackberry.com/en/admin/deliverables/4
This will only work via the work browser.
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Click "Accept as a Solution" for posts that have solved your issue(s)!