Single sign-on with Microsoft ADS ,Domino and Sametime?

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Lotus Instant Messaging/Sametime How to enable communication between multiple Lotus Sametime servers Lotus Sametime users with different 'home' servers cannot see each other online Resources for deploying Lotus Sametime on the Internet No one can see Lotus Sametime user is online Meeting windows won't appear on Sametime 7 with Sametime Connect 3 client Saving and archiving Lotus Sametime Web conferences Collaborating with clients who don't have Sametime Unable to log into Sametime through Notes with SSO Can Lotus Notes leverage domain authentication? Updating local location documents for Sametime users Lotus Sametime Instant Messaging SaaS and collaboration set the stage at Lotusphere Can Lotus Notes/Domino and Microsoft SharePoint play nice together? IBM Lotus Notes versus Microsoft SharePoint: The rest of the story Configuring Lotus Sametime on a Blackberry mobile device IBM showcases Notes/Domino 8.5; new products at Lotusphere A look at Lotus Sametime 7.5 How to enable communication between multiple Lotus Sametime servers Lotus Sametime users with different 'home' servers cannot see each other online Resources for deploying Lotus Sametime on the Internet No one can see Lotus Sametime user is online

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

View member feedback to this Ask the Expert Q&A.

Versions -- Notes/Sametime (Lotus Instant Messaging) 6.5+, Active Directory, 2000+

SSO is configured for Lotus Instant Messaging (LIM) through the Notes, but is (technically) not available through the Sametime connect or Browser-based clients.

The Connect client, and the browser based client both allow the user to "Automatically Login," but this is not dynamically updated with a password change.

Domino does support SSO through Windows Login, if the Notes SSO option is selected during installation. Since LIM uses the Internet username and password during authentication, this cannot be configured administratively through the Notes installation using a Policy settings document.

You can, however, have the users modify the Instant messaging tab in the Notes user preferences to enable SSO.

1. File -> Preferences -> User Preferences
2. Choose the "Instant Messaging" section
3. Select "Log on to IBM Instant Messaging using Single Sign-On (SSO)"

I would also recommend that password changes in this environment be handled through the Notes Client (File -> Security -> User Security) as this can be configured to change both the Notes Password in the ID file and the Internet Password in the Person document in the Domino Directory, as well as changing the Microsoft AD password at the same time, thus ensuring Windows, Notes and Sametime passwords are synchronized.

MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A:

Doesn't the Lotus single-sign on service handle this? It should at least handle the Lotus Notes authentication once you sign-on to the workstation. After that, at least the embedded Sametime in 6.5.1 and later clients gives you an option to save the password so you can automatically sign-on when Notes starts.

Not exactly true single-sign-on but practical nonetheless.

—Matt C.

Do you have comments on this Ask the Expert question and response? Let us know.