Versions -- Notes/Sametime (Lotus Instant Messaging) 6.5+, Active Directory, 2000+
SSO is configured for Lotus Instant Messaging (LIM) through the Notes, but is (technically) not available through the Sametime connect or Browser-based clients.
The Connect client, and the browser based client both allow the user to "Automatically Login," but this is not dynamically updated with a password change.
Domino does support SSO through Windows Login, if the Notes SSO option is selected during installation. Since LIM uses the Internet username and password during authentication, this cannot be configured administratively through the Notes installation using a Policy settings document.
You can, however, have the users modify the Instant messaging tab in the Notes user preferences to enable SSO.
- File -> Preferences -> User Preferences
- Choose the "Instant Messaging" section
- Select "Log on to IBM Instant Messaging using Single Sign-On (SSO)"
I would also recommend that password changes in this environment be handled through the Notes Client (File -> Security -> User Security) as this can be configured to change both the Notes Password in the ID file and the Internet Password in the Person document in the Domino Directory, as well as changing the Microsoft AD password at the same time, thus ensuring Windows, Notes and Sametime passwords are synchronized.
Doesn't the Lotus single-sign on service handle this? It should at least handle the Lotus Notes authentication once you sign-on to the workstation. After that, at least the embedded Sametime in 6.5.1 and later clients gives you an option to save the password so you can automatically sign-on when Notes starts.
Not exactly true single-sign-on but practical nonetheless.
Do you have comments on this Ask the Expert question and response? Let us know.
Dig Deeper on Lotus Sametime Instant Messaging
Related Q&A from Mathew Newman
SearchDomino.com Sametime administration expert Mathew Newman explains-step-by-step how to enable communication between multiple Lotus Sametime ... Continue Reading
If Lotus Sametime users on different "home" servers cannot see each other online, you may need to change your Sametime server awareness by creating ... Continue Reading
A Lotus Sametime user is online, but no one can see her. SearchDomino.com's Sametime administration expert Mathew Newman expert explains how to ... Continue Reading