Managing proxy server for SSO login

When using single sign-on, the system must be able to contact the single sign-on service.

Consider your network settings and whether the single sign-on service is accessible to the system. If the single sign-on service is not accessible, then firewall rules need to be added to allow communication, or alternatively a proxy server can be used. In this case, a proxy server can be used to permit traffic between the system and the single sign-on service.

Note: If the firewall rules or proxy server is not configured correctly, the system is not able to access the single sign-on service and users are not able to authenticate to the system by using single sign-on.

Using the management GUI

Complete the following steps:
  1. Select Settings > Security > Single-Sign on.
  2. In Proxy server, check the box Use proxy server so single sign-on can use proxy server.
  3. Click Save.

Using the command-line interface

Use the command chauthsinglesignon to specify whether the proxy server should be used. 
chauthsinglesignon -proxy yes/no
If proxy value is set to yes then the traffic is routed through the proxy defined on the system. If proxy value is set to no then the traffic is not routed through the proxy server. The proxy server can be created through mkproxy, for more information refer to mkproxy.