You are viewing limited content. For full access, please sign in.

Question

Question

Forms and Single Sign on components: Are they able to be isolated?

asked on October 5, 2016

Hello,

I have a customer who is currently using Forms with the single sign on components for Directory server. They would like to install Forms on its own dedicated website within IIS on their current server, bind that site to an external IP and still maintain single sign on functionality while not allowing access to the rest of the web applications on the default web site in IIS. 

Their current configuration is currently everything in IIS's default web site. This includes all available Rio web products including LFDS. They have an SSL cert applied, but don't want to make LFDS, Web Access, and other web applications available outside their internal network. With single sign on, when a user navigates to Https://Hostname/Forms, there is a redirect to the LFDSSTS components for authentication. The customer is okay with this component being available outside of their network as well, as it would allow for authentication into the Forms application. 

I have suggested moving Forms to another web server, however the LFDSSTS component would still be required for authentication and that component still resides on the Default web site for IIS- which the customer wants to make unavailable externally. 

I think I have confused myself with my explanation of this...Please ask for clarification if you don't understand as I feel I've done a poor job painting this picture.  

Is it possible to simply clone the web apps (Forms, Formsconfig, LFDSSTS) to another site on the same machine to achieve the desired configuration? 

Best Regards,

Hunter

1 0

Replies

replied on October 6, 2016

Does this forum support "bump" technology?

:)

2 0
replied on October 6, 2016

Installing the Single Sign On component separately is not currently supported. At this time, our best recommendation is to look into a reverse proxy in your DMZ to forward the external traffic to your internal LFDS.

Simon Verreault was kind enough to share his detailed how-to for setting up reverse proxy for Web Access, which may help you get started.

Thank you for sharing your use case!

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.