Hello,
I have been trying to search the forum for related topics, but I cannot find anything conclusive on this matter. We are in the process of configuring our RDMS/RDM system, and would like the RDM Client (locally installed or otherwise) to use local Windows credentials to authenticate the RDMS data Source. Isn't this possible?
Since we're using AD-credentials to authenticate, it seems like unnessecary work to type the currently used credentials every time the client connects to the data source. As a security precaution, we would at the same time like to force users to only be able to supply their own currently cached windows-credentials.
Any hints or tips?
Hello,
Not at this time, we would need to implement something like Kerberos authentication to have access to your security token. It's high on our request list though, we just haven't implemented a solution yet.
We have implemented "my personal credentials" that allow you to enter them a single time.
Best regards,
Maurice
In the datasource an option is available to use Integrated Security but you will still have to add these users to RDM.
When adding the users to RDM you will have to choose Integrated Security also and you can choose to create the SQL Server login and user as well but you may be able to opt out when the users already exist (for example via a Windows Group. Opting out of creating the SQL Server logins and users is something we still have to test - the rest I've implemented succesfully.
OK Maurice, it would simplify things greatly for us. I understand I can use %username% at least in the 'Username' field on the data source, so at least that's taken care of.
Unfortunately, Integrated Security doesen't exist for RDMS - only SQL :|
Hello,
Most of our users that are using workstations joined to the domain are comfortable with using :
%USERDOMAIN%\%USERNAME% for the username field, and choosing to "always ask password".
They also choose to lock the application using one of our options (timeout or minimize). It brings an additional level of security.
We definitely want to implement a true SSO, but we have yet to tackle this.
Maurice
SSON with RDMS would be a great feature!
Are there any plans when you want to implement SSON?
We are planning to implement Smartcard+PIN for Windows Authentication. If we start with that we will have problems to authenticate to RDM.
Best regards,
Andy
This is something we want to do eventually but not before this summer.
David Hervieux