Timeline for SharePoint App asking for credentials for each domain of app
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 25, 2017 at 12:15 | comment | added | MHeld | If you use sharepoint.contoso.com for SharePoint, you can configure *.apps.contoso.com for apps. This is not security best-practise from Microsoft, but it works. It's not much work to reconfigure and i've documented the tasks already here: sharepoint.stackexchange.com/questions/222047/…. To be honest: I am not sure if InternetExplorer will send Credentials to a different subdomain. I've never tested this scenario. My assumption: It will not work and you still have to work with external tools. | |
| Oct 25, 2017 at 11:34 | comment | added | Rahul | Thanks for your time and answers. If we use same domain for both sharepoint and app, it will work, right. | |
| Oct 25, 2017 at 10:39 | comment | added | MHeld | By the way: My suggested solutions offer a really great login-experience with a nice form instead of the ugly windows-logon-window. And they increase security-level drastic, as they perform user-preauthentication & reverse-proxying. | |
| Oct 25, 2017 at 10:37 | comment | added | MHeld | I'm very sorry, but SharePoint won't help you out-of-the-box with that problem. Credential handling between SharePoint-Domain and App-Domain must be done with an external Tool. ADFS+WAP and AzureADProxy are my favorites. I have seen customers implementing this with Citrix Netscaler and F5 BigIP, too. But that's much more effort&money. | |
| Oct 25, 2017 at 10:33 | comment | added | Rahul | Thanks for your reply @MHeld. Cant we do without azure & ADFS? I dont want single sign on. When we open SharePoint site, it will ask for login and when i open app, it will again ask for login. i just want to remove that login in app. | |
| Oct 25, 2017 at 10:10 | history | edited | MHeld | CC BY-SA 3.0 |
Updated solutions based on comments.
|
| Oct 25, 2017 at 10:06 | comment | added | MHeld | Updated answer above | |
| Oct 25, 2017 at 9:22 | comment | added | Rahul | Yes, your answer is correct but our site users are not in our domain. | |
| Oct 25, 2017 at 9:09 | comment | added | MHeld | For testing you can add the site on one client manually as you can see in my screenshot. | |
| Oct 25, 2017 at 9:08 | comment | added | MHeld | This is normally deployed to the whole organization with Group Policies. There are two ways to build an according GPO, both are described here: blog.thesysadmins.co.uk/…. I highly prefer the second way, as it doesn't break existing settings and still allows users to add sites on their own. | |
| Oct 25, 2017 at 8:51 | comment | added | Rahul | how we do in client machine? is there any proper solution? @Mheld | |
| Oct 25, 2017 at 8:09 | history | answered | MHeld | CC BY-SA 3.0 |