Self Service Password Reset can integrate with different systems to provide a single sign-on (SSO) experience for your users. Self Service Password Reset supports basic authentication (basic auth), HTTP SSO, and OAuth.
Self Service Password Reset allows you to use HTTP basic authentication for a single sign-on experience for your users. By default, Self Service Password Reset uses basic authentication.
To configure basic authentication:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Single Sign On (SSO) Client > Basic Authentication.
Use the help to configure the settings for basic authentication.
In the toolbar, click Save changes.
Self Service Password Reset allows you to create a single sign-on experience using an HTTP header. Self Service Password Reset uses the HTTP header to automatically log users into an application with a user name only.
To configure the HTTP header for single sign-on:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Single Sign On (SSO) Client > HTTP SSO.
Use the help to configure single sign-on for your users.
In the toolbar, click Save changes.
Self Service Password Reset allows you to create a single sign-on experience for your users using OAuth. You must have a basic understanding of OAuth to complete the configuration because you must obtain OAuth-specific information from the application to complete the configuration. For more information, see https://oauth.net/2/.
You must gather the following information from the OAuth Identity Server of your application before you can complete the configuration:
URL for the OAuth login
OAuth code resolve service URL
OAuth profile service URL
OAuth web server certificate
OAuth client ID
OAuth shared secret
Attribute you want the OAuth server to use to identify the user names
Use the information you gathered to create an OAuth single sign-on experience for your users:
To configure OAuth SSO:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Single Sign On (SSO) Client > OAuth.
Use the information you gathered and help to configure OAuth for your users.
In the toolbar, click Save changes.