[Progress Communities] [Progress OpenEdge ABL] Forum Post: SSO - Client Principal Object - Implicit vs Explicit Best Practices

  • Thread starter Thread starter bauen@fordav.com
  • Start date Start date
Status
Not open for further replies.
B

bauen@fordav.com

Guest
It's my current understanding that on a PASOE web server - after authenticating a user against AD, LDAP, etc. - that Progress implicitly creates a Client Principal object or token. Well, that is if you have your oeablSecurity.properties file's OEClientPrincipalFilter.enabled set to true. Is it best practice to use this implicitly created token for each user session or is it optimal to explicitly create a token to enact SSO? Also, if it is acceptable to use the implicitly created token do you rely purely on the OEClientPrincipalFilter settings that are contained in the oeablSecurity.properties file?

Continue reading...
 
Status
Not open for further replies.
Back
Top