Home
IBM® Domino 10.0.1 Documentation
Welcome to the IBM® Domino 10.0.1 Administrator Help.
Securing
This section describes IBM® Domino® security features, including execution control lists, IDs, and SSL.
Multi-server session-based authentication (single sign-on)
Multi-server session-based authentication, also known as single sign-on (SSO), allows Web users to log in once to a Domino® or WebSphere® server, and then access any other Domino or WebSphere servers in the same DNS domain that are enabled for single sign-on (SSO) without having to log in again.
Setting up Windows™ single sign-on for Web clients
You can set up a Domino® Web server to honor Microsoft™ Windows™ users' Active Directory logon credentials. Web users who are logged on to the Active Directory domain can open applications on the server from a browser without being prompted for a password.
Setting up the Windows™ service for Domino®
To enable a Domino® server to participate in Windows™ single sign-on for Web clients, an Active Directory administrator must use the Active Directory setspn utility to assign at least one service principal name (SPN) for the server to an Active Directory account. SPNs correspond to DNS names in server URLs (for example, www.renovations.com) that Web clients use to connect to the Domino server.
Verifying that the Domino® server is logged on under the correct account
After you have assigned SPNs to an account, verify that the Domino® server is logged on under that account.

Verifying that the Domino server is logged on under the correct account

After you have assigned SPNs to an account, verify that the Domino® server is logged on under that account.

Procedure

From the Microsoft™ Windows™ Control Panel, click Administrative Tools > Services.
Locate the Domino Server entry and verify that the Logon as column displays the correct account name. If you have assigned SPNs to a named account, the named account should be shown. If you have defined SPNs for the default account associated with the Domino server computer, Local system should be shown.
Optional: Locate the Domino Diagnostics entry and verify that its Logon as column displays the same account name. Running the Domino Diagnostics utility and the Domino Server under the same account enables the utility to notify a Domino administrator who is also logged on under that account of server error conditions, such as unexpected server exit.