<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title>Answers to: Calling NTLM protected REST service with SSO</title><link>https://answers.axonivy.com/questions/3477/calling-ntlm-protected-rest-service-with-sso</link><description>&lt;p&gt;In Ivy 7.1, is it possible to call a NTLM protected web service using the logged in user (therefore not configuring user/password in the REST client)?&lt;/p&gt;</description><atom:link href="https://answers.axonivy.com/questions/3477/calling-ntlm-protected-rest-service-with-sso" rel="self"></atom:link><language>en</language><lastBuildDate>Mon, 15 Oct 2018 03:02:02 -0400</lastBuildDate><item><title>Answer by Reguel Wermelinger</title><link>https://answers.axonivy.com/questions/3477/calling-ntlm-protected-rest-service-with-sso/3479</link><description>&lt;p&gt;I've just inspected the &lt;a href="https://developer.axonivy.com/doc/latest/PublicAPI/ch/ivyteam/ivy/rest/client/authentication/NtlmAuthenticationFeature.html"&gt;NTLMAuthenticationFeature&lt;/a&gt; of our REST clients. It looks like currently we explicitly block the re-usage of the user/password which are known by to the JVM. We enforce the usage of the username+password defined in our own webservice client configuration. So &lt;strong&gt;no, today SSO will not work&lt;/strong&gt; with REST client calls.&lt;/p&gt;
&lt;p&gt;For a future improval. What would you expect from an NTLM/SSO feature? Should it re-use the credentials from the current user that works with ivy or should it be the account that runs the JVM (axonIvyEngine)?&lt;/p&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Reguel Wermelinger</dc:creator><pubDate>Mon, 15 Oct 2018 03:02:02 -0400</pubDate><guid>https://answers.axonivy.com/questions/3477/calling-ntlm-protected-rest-service-with-sso/3479</guid></item></channel></rss>