Sign in to follow this  
Followers 0
The Mad Jammer

Single Sign On from an external portal

7 posts in this topic

Hi,

 

We are using FMP version 9 and want to do the following 

 

  • Post a simple web form from FMP 9 for our users to enter data.
  • Allow the user to log in through our current employee portal, click a link and access the FMP form.
  • Restrict the user's access to records in the FMP database to only their location.
  • FMP must use the portal login credentials to authenticate them against Active Directory (the SSO part).

 

Sounds simple enough but I haven't used FMP for several years (got into the management end of things). Publishing the form for web consumption is no problem. It's the SSO part that I certainly need help with. It would also be OK for the user to come in as a guest (without having to log in again) as long as the data they see is only for their location.

 

There are about 300 locations that would have access to the form so it's vitally important that the data be segmented for each location. I would prefer to create 1 database for all 300 locations rather than creating 300 versions of the same database.

 

If you can point out any posts that speak to these issues I would appreciate it.

 

Jammer

Share this post


Link to post
Share on other sites

I  moved your topic from "FileMaker Legacy Versions 7 – 9" to "Peer To Peer Sharing” since you are asking about sharing. I put it into Peer since you made no mention of FileMaker Pro Sever.

 

The General Topic “Legacy” are meant for discussion of the Tools, Function and Features that were introduced with that version of FileMaker Application.

Edited by Lee Smith
added some info

Share this post


Link to post
Share on other sites

SSO is not possible in this scenario.

 

Segmenting the data based on the user is not a problem.

Share this post


Link to post
Share on other sites

Hi Wim,

 

Thanks for the response. Not understanding why "SSO" is not possible. Can I pass a parameter (the location number) from the portal link into the FMP?

 

Thanks

Jammer

Share this post


Link to post
Share on other sites

True SSO happens at the authentication level and in the FM space that is only possible in the following scenario:

- FMS running on Windows (Window server part of an AD domain)

- FMS configured to allow External Authentication

- FM solution set up for External Authentication

- Windows workstation, member of the domain

- user logged into the workstation with an AD account

then when the user is part of an AD group that is also set up in the FM file, the user will be properly authenticated without having to provide credentials.

 

 

Anything else is not SSO but ways of doing hidden authentication and then figuring out how to identify the user.  Not SSO and potentially dangerous.

Share this post


Link to post
Share on other sites

OK, so I verified we're running FMS 9 on a Windows server and that server is part of the AD domain already.

All the user workstations are part of the domain (dadeschools is the domain name BTW).

 

We have set up AD account groups for the users (i.e. WCTC_nnnn). WCTC is the nickname of the AD group and nnnn is the location number. This is the standard we use in our shop for AD groups. It's based on RACF authority that is used to update our security groups every day.

 

So what I'm seeing is that we would need to create/define all the AD groups within the FMP application so that they map to the AD groups in Active Directory. Is that correct? Also, can we import AD group names from the AD to expedite the process? if so, how?

 

Thanks

Jammer

Share this post


Link to post
Share on other sites

Yes, the External Accounts that you set up in FM need to match exactly the name of the AD group you want to match it to.

 

As to importing: no.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Similar Content

    • By Justin Close
      I was doing a bit of work for a client who is running FM9 clients, connecting to a file hosted on an FM11 server.  I don't have FM9, so was doing development on FM11.  I thought I had checked out that everything was compatible, but I somehow generated a calculation that doesn't evaluate on 9, but does on 11.  The components of the calculations and custom functions used all appear to be innocuous...  I  am hoping someone here knows what I tripped up on.
      Here's the field calculation, and the 2 custom function definitions that it uses.  The entire point of this calculation is to take a mish-mash text field that they have and make it sort nicely.  For this bit I added, I'm just concerning myself with sorting some suffix numbers that occur between parentheses, e.g. 12345(A-1).
       
      Field calculation definition: Let ( [ _fileNum = Files::File Number ; //Position of 1st open/close parens, and then extract the text between them: _sParen = Position ( _fileNum ; "(" ; 1 ; 1 ) + 1; _eParen = Position ( _fileNum ; ")" ; 1 ; 1 ) ; _suffix = Middle ( _fileNum ; _sParen ; _eParen - _sParen) ; //Count the leading digits before any non-digit character, e.g. an alpha, or dash or space, etc. _count = CountPrefixDigits ( _suffix ; 0 ) ; //Remove extraneous characters (dash, space): _suffix = Substitute ( _suffix; ["-";""]; [" " ; ""] ) ; //Pad out the string to min 5 characters (helps 75-A sort next to 75): _suffix = _suffix & Left ( "!!!!!" ; 5 - Length (_suffix) ); //Reverse the character sequence (so the Code() call works out better): _suffix = ReverseString ( _suffix ) ]; _count & Code ( _suffix ) //prepend the digit count, but don't encode that count, just the rest of it ) -------------------- 'CountPrefixDigits ( aString ; aCounter )' custom function: If ( IsEmpty ( GetAsNumber ( Left ( aString ; 1 ) ) ) ; aCounter ; CountPrefixDigits ( Right ( aString ; Length ( aString) - 1 ) ; aCounter + 1 ) ) -------------------- 'ReverseString (aString)' custom function: If ( Length ( aString ) > 0 ; ReverseString ( Right ( aString ; Length ( aString ) - 1 ) ) & Left ( aString ; 1 ) ; Left ( aString ; 1 ) )  
      Thanks,
      Justin
       
    • By Tumma K
      Hello, All!

      I am an aspiring developer for Filemaker. The company I work with is stuck in the past working off of Filemaker Pro 4.1

      I was given the task of bringing us up to Filemaker Pro/Server 13. So far my conversion prototypes are successful but we recently had a layout issue that can only be fixed in versions 3-6 (as the file is an .fp3) I work off of a macbook while our network is all Windows 7. In order for me to repair the layouts without tampering our active database, I decided the best option is to repair a copy of our solutions off the network. Unfortunately, when I go to download the trial version of Filemaker Pro 6 off of the respected website, the file is corrupt! I've tried multiple times, with different extraction apps and in different directories.

      My question is;

      Does anyone know a place where I could obtain version 6 (or better yet, 4.0) for an OSX computer? I've looked everywhere!
       
      Thank you for your time,
      Tumma K.
    • By MacSig
      Hello everyone.
      How can I set the calculated value of field C to the number of records having field A equal to the value inserted to field A and field B equal to the value inserted to field B?
       
      For instance with the following situation
       
      record 1  =>  A = "house", B = "pay" 
      record 2  =>  A = "house", B = "win" 
      record 3  =>  A = "car", B = "pay" 
      record 4  =>  A = "house", B = "pay" 
       
      when I create a new record having  A = "house", B = "pay"  C should automatically be 2 (since record 1 and 4 have the same A, B.
       
      Thanks
    • By MrEddByrnes
      I'm hoping my question can have a happy ending. In the mid-90's, I purchased Filemaker 3. When Filemaker 5.5 Pro was released, I bought the update CD, which requires the user to either have FM 3 installed or to have the installation CD for FM 3. I've used it all these years, most recently with Windows XP Pro, and it has worked just fine. The databases I began with were long ago converted to FM Pro 5.5 databases.
       
      I'm still using FM Pro 5.5 on a laptop with WinXP Pro, but in 2013, I purchased a PC with Windows 8. I haven't been able to install FM 3 on it, therefore can't install FM Pro 5.5. I am retired and rarely use Filemaker, but I have a few Filemaker databases I'd like to add to my Win 8 machine. I don't feel it's worth upgrading FM for the sake of using a couple of databases.
       
      Has anyone else run into this situation and/or have a (possible) solution? Is there perhaps any other software that can read FM 5.5 databases? Thanks in advance for your help.
       
    • By bmill
      I am using a custom filemaker solution for medical office billing written with fp5 running on a mac with snow leopard. In addition, I have a patient management db (which I wrote) that is linked through pt. ID number to the billing program allowing transfer of some demographic information (name, DOB, etc).
       
      Other than being limited by hardware restrictions, the billing program serves our needs for now and upgrading to fp12 will take some time (and money).  In the meantime, I am upgrading my pt. management program to fp13 and would like to move new patient demographic information from the billing program ( fp5 running on snow leopard through Parallels) and the new pt management program ( fp13 running on OS X 10.9) on the same mac.   
       
      Ideally, demographic information would be entered once into fp5 and then a scipt would make the data available for fp13.
       
      Any ideas on how to make this work?