Filemaker + Web SSO

[Aerocan]

I need help.

I need to develop a FMP database for a customer who has around 3000 employees. The plan is to have a website accessible by empoyees once they have been recognized by the database. The web info may be accessed only if you log in the databse. The web has about 10 realms with 3 different user lists. Up to now it has always worked using 2 sign on. One for the FMP and one for the web. The objective is to have a "Single Sign On" (SSO).

Does someone have an idea how I could do that? All on Mac platform.

I know I could use OS X Server (LDAP) but the problem is that FMP handles the access privileges by group and not by user ID. I need to access the DB with user ID.

Any adea?

[Phillip Holmes]

Hi Aerocan,

When you say they sign into the DB first is that sign on via FMP client or a IWP web page.

[Aerocan]

They sing in via a web form that I have made.

[Steven H. Blackwell]

This setup strikes me as likely to causeproblems and not to work correctly.

First, when authenticating externally, the Get(AccountName) function will return the individual Account Name not the Group name.

Second, if someone learns or guesses the IP address of the server and if the hosted files areacessible by FMP clients, they may be able to bypass the web page you created.

Take a look at the External Server Authentication White Paper from the FMI Web site.

Steven