Setting up and signing in using Single Sign On (SSO)

Prerequisites

• You have configured Cookie Authentication on your community.
• Your mobile site is configured as an application under your community in IIS or is on the same domain.

Installation

It is highly recommended that you use encrypted cookies for better security

1. In your mobile site, locate and edit the web.config file.
2. Locate the cookiesSSOAuthentication section.
3. Verify the enabled attribute is set to true.
4. Verify the following attributes are set up to match the settings you used in your community exactly.  The attribute names should be consistent between your community configuration and mobile. For more detailed information on what these attributes mean, refer to the Cookie Authentication document referenced above.
   1. On the cookiesSSOAuthenticationnode:
      1. authenticationCookieName
      2. usernameKey
      3. useEncryptedCookie
      4. cookieValueStringFormat
      5. cookieValueEncryptionFormat
         
         
   2. On the encryption node(if useEncryptedCookieis true, which is recommended).  DO NOT change provider type
      1. algorithm
      2. iv
         
         
5. Save the web.config.
6. Now, when signing into mobile and clicking on the full site button or any link that takes you to the full community, you will also be signed into the main community site.

Examples

Here are examples that show a community configuration and its corresponding mobile configuration:

Community:

          <add name="CustomAuthentication"
             extensionType="Security"
             type="Telligent.Evolution.SecurityModules.CookieAuthentication, Telligent.Evolution.SecurityModules"
             allowAutoUserRegistration="true"
             authenticatedUserCookieName="CSUser"
             usernameKey="username"
             emailAddressKey="emailAddress"
             useEncryptedCookie="true"
             cookieValueStringFormat="Base64"
             cookieValueEncryptionFormat="ValuesOnly" />
          
           <add name="EncryptionProvider"
					    extensionType="Encryption"
              type="Telligent.Evolution.SecurityModules.SymmetricEncryptionProvider, Telligent.Evolution.SecurityModules"
					    algorithm="TDES"
					    key="M03QwyoxKs4Nz6NL4h5CF7VKgj9fmTQ/"
					    iv="sC7d/m6Z0+o=" />

Mobile:

    <cookieSSOAuthentication enabled="true" authenticatedUserCookieName="CSUser" usernameKey="username" useEncryptedCookie="true" cookieValueStringFormat="Base64" cookieValueEncryptionFormat="ValuesOnly">
        <encryption algorithm="TDES" key="M03QwyoxKs4Nz6NL4h5CF7VKgj9fmTQ/" iv="sC7d/m6Z0+o=" providerType="TelligentEvolution.Mobile.Web.Common.SSO.Encryption.SymmetricEncryptionProvider, TelligentEvolution.Mobile.Web" />
    </cookieSSOAuthentication>