SSO Configuration - Properties
Use this tab to define properties for a single sign-on session. Not all properties are automatically displayed. To change a default key value, type the key value as defined in the following table and assign a value to the key.
Field Name |
Description |
|---|---|
login.form.password.field.name |
Field name of the password on the single sign-on login page. Default=password. |
login.form.userid.field.name |
Field name of the user ID on the on the single sign-on login page. Default is user. |
sso.login.command |
Field name of the log in command. Default=login. |
sso.logout.command |
Command used in the URLS specified in security.properties_filegateway_ext file for logout. For example, the logout command in SSO_FORWARD_URL.MYFILEGATEWAY.LOGOUT= /Signon/logout) is logout. Default =logout. |
sso.validation.err.command |
Command used to specify validation errors in the URL specified in the security.properties_filgateway_ext file. Default=validationerror. |
sso.timeout.command |
Command used to specify timeout in the URLs specified in security.properties_filegateway_ext file. For example, the value is specified as timeout in the SSO_FORWARD_URL.MYFILEGATEWAY.TIMEOUT= /Signon/timeout) command. Default=timeout. |
sso.req.prefix |
Prefix used in the URLs specified in the security.properties_filegateway_ext file in Sterling File Gateway. For example, the prefix in SSO_FORWARD_URL.FILEGATEWAY.LOGOUT= /Signon/logout is Signon. Default=Signon. |
sso.token.validation.interval |
If multiple HTTP requests are made on the same TCP connection, Secure Proxy validates the token first if the interval between the last validation and the current request is more than the value specified in this property. |
| sso.pwd.policy.cookie.name |
Used to get the Password Policy mapped the cookies associated with each token. Default=SSOPP |
| cookie.http.only |
Gives option for adding Http-Only property to the cookie Default=true |
| ssotoken.cookie.max.age.secs |
Gives maximum age of the cookie in seconds Default=-1 |
| ssotoken.cookie.path.attr |
Path attribute value used for SSOTOKEN cookie Default="/" |
| password.policy.cookie.path.attr |
Path attribute value used for SSOPP cookie Default="/" |
| redirect.to.idp.logout |
Boolean value. If true, will redirect the user to IdP when logged out of myfilegateway or MyFG2.0 application Default=true |
| no.cookie.sso |
Boolean value. This should be set to true for MyFG 2.0 application. Default=false |
| myfg.url.path |
MyFG 2.0 application base url path Default=/myfg |
| sso.cookie.same.site.attr |
Same Site Cookie attribute value. Valid values are Strict, Lax and None. Default=/Lax |
| External Portal properties | |
| userid.from.attribute.in.authnresponse | Set this property to true when IdP returns the userid as attribute in the
AuthnResponse. When this property value is false it is expected that
IdP returns the userid as subject in AuthnResponse.
Default=false |
| userid.attribute.name.in.authnresponse |
If the 'userid.from.attribute.in.authnresponse' property value is true, set this property to the OID of the attribute in which the userid is returned by the IdP. Example value: urn:oid:0.9.2342.19200300.100.1.1 |
| redirect.to.idp.logout |
Set this property to true to configure Secure Proxy to redirect user to the log out page of an external IdP portal where the IdP logs out the user of all SSO sessions. For more information, see your IdP documentation for the expected behavior. Default=True Set this property value to false to log out in the following scenario: A trading partner logs out from a myFilegateway session and is able to reconnect to the application without re-authenticating and continue operations. For more information see, Log out to an external portal |
| Configuration properties to work with MyFG2.0 Note: If both
Myfilegateway and MyFG2.0 are to be supported in one SSP Engine, you must configure two SSP HTTP
adapters, one for each, since their SSO configuration properties are different. |
|
|
myfg.url.path |
This is the url path for the MyFG2.0 Application |
| no.cookie.sso | Set this property to true for MyFG2.0 |