UPDATE: We got this working eventually, this was a CORS issue because our front end and back end had different URLs. We made changes to both sides, so for anyone who might run into this issue like I did, here's what we did: For BE side: We had to modify the @CrossOrigin annotation for the specific method. It ended up looking like this: @CrossOrigin(origins = {"${app.api.settings.cross-origin.allowed-origins}"}, maxAge = 3600, allowCredentials = "true") @GetMapping("/getSsoToken") public ResponseEntity<Object>...
UPDATE: We got this working eventually, this was a CORS issue because our front end and back end had different URLs. We made changes to both sides, so for anyone who might run into this issue like I did, here's what we did: For BE side: We had to modify the @CrossOrigin annotation for the specific method. It ended up looking like this: @CrossOrigin(origins = {"${app.api.settings.cross-origin.allowed-origins}"}, maxAge = 3600, allowCredentials = "true") @GetMapping("/getSsoToken") public ResponseEntity<Object>...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hello, I currently have the whole SSO setup working on my Spring 3 web service. The issue I'm running into is, it doesn't seem to work when accessing the URL through our front end service? For example, I'm supposed to call an API that goes through this SSO authentication when the user clicks a specific button on the page. If I try typing out the API directly onto the browser, it works as expected and I get my result. The logs also print out the expected log: net.sourceforge.spnego.SpnegoHttpFilter.doFilter...
Hey Darwin, Sorry for the late reply, after a lot of tinkering we finally managed to get it to work after all! The nail in the coffin was testing the SSO using a different account than the pre-authentication account. I had wrongly assumed that logging in to the workstation using the pre-auth credentials and trying the SSO out would "just work" since it was a valid AD account anyway. But our IT guy suggested that I try logging in to the workstation with a different AD account, and that one did work....
Hey Darwin, Sorry for the late reply, after a lot of tinkering we finally managed to get it to work after all! The nail in the coffin was testing the SSO using a different account than the pre-authentication account. I had wrongly assumed that logging in to the workstation using the pre-auth credentials and trying the SSO out would "just work" since it was a valid AD account anyway. But our IT guy suggested that I try logging in to the workstation with a different AD account, and that one did work....
Just found a difference when accessing the app from the computer name (servercomputername.domain-name.local) VS the DNS URL (webapp.website.com). When accessing with the DNS URL, it shows the custom Microsoft Edge login prompt, and is able to authenticate properly after providing credentials. However when I access the app with the computer name, it shows the default (?) Windows Security login prompt box. Once I provide the correct credentials, it returns Failure unspecified at GSS-API level (Mechanism...
Hello, I was able to set up a third machine (Windows 10) and separated the app from the KDC. Still no success. Btw, I stated the wrong OS for my first two machines, they are both Windows Server 2022 (I initially said 2012, sorry). Based on what I understand from SPNs, I've also updated the SPNs for the service account to ONLY be the URLs from which I can access the app. From my experience, the Apache Tomcat homepage ONLY shows up when I use the URLs "webapp.website.com" and "servercomputername.domain-name.local"....
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have some differences with the provided guide, specifically with the encryption method. I couldn't figure out how...
Hey Darwin, I'll ask if I can have another VM set up and will let you know how it turns out. I am using Java 17 downloaded from here: https://www.oracle.com/ph/java/technologies/downloads/#jdk17-windows
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have some differences with the provided guide, specifically with the encryption method. I couldn't figure out how...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have some differences with the provided guide, specifically with the encryption method. I couldn't figure out how...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have some differences with the provided guide, specifically with the encryption method. I couldn't figure out how...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt dialog box, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to...
Hello, would like to ask for some assistance in setting up SSO. Made it through the pre-flight checklist and it was working on the server as well as the client machine. However when setting up the Tomcat part, when accessing hello_spnego.jsp, it still shows the login prompt, which I understand means that the SSO part failed and it is asking for the credentials manually. I do have a difference with the provided guide, specifically with the encryption method. I couldn't figure out how to get AES to...