You are viewing limited content. For full access, please sign in.

Question

Question

Sign into web client with Directory account when set for Laserfiche credentials and the account is a SAML account?

asked on January 17, 2023

I'm not sure if this is possible but I have a situation now where I have a group of users that are setup in LFDS as LFDS accounts and some are SAML account. The SAML accounts work just fine on my internal Web access because I have it setup for auto login. However some of these user are off site and do not have access to the internal web access server and also don't have Azure AD accounts. In the past, before we used SAML, I could set my external web access server to prompt for Laserfiche Credentials, and my internal users could type in the domain name and their windows accounts. The external users would use the LF username and password.  

Obviously I don't use Windows auth anymore and when I type in my Azure account and password, I get "LDAP server profile not found. [9356]". In LF admin console we are all setup the same. All the accounts are listed under Laserfiche directory accounts. The users that don't have Azure account will get in just fine. I have LFDS authentication turned off on the external site so its prompts for uyser name and password. Its the users that have Azure(SAML) accounts that I'm worried about. I don't want to have to assign 2 license to these users. 

Any ideas on what could be a solution here? 

0 0

Replies

replied on January 17, 2023

Using LFDS for Web Client Authentication for the external web client ( I am asuuming Web Client in the DMZ) should allow for both the SAML and Laserfiche Directory Users to login. May need another webSTS instance on the external server.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.