This article explains how to configure Active Directory (AD) Single Sign-On (SSO) functionality with Issuetrak. With this feature enabled, the browser will automatically log in with the current user's Windows credentials.
- Must have purchased the Identity Management integration (Please see your Account Manager if interested in purchasing).
- Web Server hosting the Issuetrak site must be joined to your Active Directory domain. (Because of this prerequisite, AD SSO is not available to Cloud customers).
- Read and Execute permission on the Issuetrak web folder for Domain Users.
- Additional permissions for several subfolders in the Issuetrak web folder: See KB 1578 for more information on this.
- The Identity Management module must be active in the site. See this article for steps if needed.
Enable Single Sign-On in Issuetrak
- Click the gear icon in the upper right > click on Features beneath System.
- Scroll dow to the Identity Management section.
- Select Allow single sign on functionality.
- Click Update to save the new settings.
- Open IIS and navigate to your Issuetrak site.
- In the middle, double-click Authentication.
- Right-click Anonymous Authentication > Disable.
- Right-click Windows Authentication > Enable.
Configure Web Browser
Chrome / Chromium Edge
- On the workstation, search for and select Internet Options.
- Select Security tab.
- Select the zone that corresponds to the Issuetrak site.
- You may wish to add Issuetrak to your Trusted Sites zone.
- Click Custom Level.
- Scroll to the bottom.
- Under the User Authentication section, select Automatic logon with current user name and password.
- Click OK to save the changes.
- Type about:config into the address bar, then press enter.
- A warning screen may appear. Click Accept the Risk and Continue.
- Type network.auto into the Filter.
- Locate network.automatic-ntlm-auth.trusted-uris.
- Click the pencil icon.
- Type in the URL for the Issuetrak site.
- Click the blue checkmark icon to save the changes.