Answers to: SSO on Apache: not logged in to Ivy but in tomcat?

Answer by Alexis

Alexis — Wed, 20 May 2015 16:19:35 -0400

After a lot of research I found this solution.

In httpd.conf I added this code to the Location-Tag (< Location /ivy5 >) it will simply chopp off the @REALM from the User sent to Ivy. It is so far the simplest and possibly the only way to modify the User before it is given to Tomcat.

    RewriteEngine On
    RewriteCond %{LA-U:REMOTE_USER} ^(.+)@.*$
    RewriteRule ^ - [E=JK_REMOTE_USER:%1]

Most informations I got from: httpd.apache.org/docs/2.2/mod/mod_rewrite.html

Answer by Reto Weiss

Reto Weiss — Mon, 18 May 2015 11:06:13 -0400

Hi Alexis

The problem is that Axon.ivy is not prepared that the user name is in the format user@domain. It can handle SSO if the user name is in format user or like in IIS domain\user.

Try to change Apache configuration to provide the user name in a support format.

If this is not possible and it is important for your project sent a feature request to our support so that we can also support the format provided by Apache.