Troubleshooting single sign-on problems with Domino®

Troubleshoot problems when using single sign-on (SSO) with Domino® Directory.

About this task

When you configured Domino® Directory as your LDAP directory, you might have entered no value for the Distinguished name of a base entry in this repository attribute because Domino® Directory contains flat groups. However, SSO does not work correctly with this configuration.

To resolve this problem, configure the Virtual Member Manager component of WebSphere® Application Server to use Domino® Directory flat groups:


  1. Open the wimconfig.xml file in a text editor. The file is stored in the following location:
    AIX® /usr/IBM/WebSphere/AppServer/profiles/<profile_name>/config/cells/ <cell_name>/wim/config
    Linux /opt/IBM/WebSphere/AppServer/profiles/<profile_name>/config/cells/ <cell_name>/wim/config
    Microsoft Windows C:\IBM\WebSphere\AppServer\profiles\<profile_name>\config\cells\ <cell_name>\wim\config
  2. Replace the <config:baseEntries name="o=example" nameInRepository="o=example"/> string with the following string: <config:baseEntries name="" nameInRepository=""/>.
  3. Replace the <config:participatingBaseEntries name="o=example"/> string with the following string: <config:participatingBaseEntries name=""/>.
  4. Save and close the wimconfig.xml file.
  5. Restart the Deployment Manager.