Single sign on

[Ragu]

Hi,

 

We have 2008r2 and running win10. We are LGFL school and the biggest problem I have is . Every single service the users need separate login. For example they need to login to Lgfl email and Target Tacker other VLE.

 

Is there a solution that a AD user can login to their computer and they never need to put username and password for applications and web based login? For example LGFL mail and Target Tracker.

 

Somebody mentioned something called securesocket is one of the solution I should be looking. Please point me in the right direction. Thanks

[Manny-Tech]

I don't know much about the LGFL setup but certainly in our school we have SSO for O365, G-Suite, VLE via ADFS services. It all depends on what authentication mechanisms your providers support.

[eean]

As Liam said ADFS is best if the service supports it. Unfortunately not much educational software does. Services like clever.com and classlink will accept adfs login then inject a known password into the website via a browser plugin.

[southhamster]

We use RM Unify at my main school and so far it's been good. AD syncs gmail and quite a lot of other login apps like Learnpad tapestry etc.

Staff think it's a kind of magic that it knows who they are...

However I'm not sure that it can be used at non RM broadband schools.

[Edu-IT]

We use RM Unify at my main school and so far it's been good. AD syncs gmail and quite a lot of other login apps like Learnpad tapestry etc.

Staff think it's a kind of magic that it knows who they are...

However I'm not sure that it can be used at non RM broadband schools.

It can be.

[Zoom7000]

Hi,

 

We have 2008r2 and running win10. We are LGFL school and the biggest problem I have is . Every single service the users need separate login. For example they need to login to Lgfl email and Target Tacker other VLE.

 

Is there a solution that a AD user can login to their computer and they never need to put username and password for applications and web based login? For example LGFL mail and Target Tracker.

 

Somebody mentioned something called securesocket is one of the solution I should be looking. Please point me in the right direction. Thanks

 

You know that LGfL offer USO AD Sync right? So they can automatically populate your AD with accounts for pupils and staff. All free with your LGfL subscription. For Target Tracker, you can do a USO export and create the accounts with the same credentials. Depending on the VLE, if it allows Shiboleth integration, pretty sure Atomwide should be able to help.

[gh5000]

You know that LGfL offer USO AD Sync right? So they can automatically populate your AD with accounts for pupils and staff.

 

Whilst this is useful, the last time I used it, it didn't mean that there was SSO for the LGfL's webmail system. The users it was making were auser3 in AD but LGfL use auser3.319 (319 being the DFE no for the LA the school is in)

[Ragu]

You know that LGfL offer USO AD Sync right? So they can automatically populate your AD with accounts for pupils and staff. All free with your LGfL subscription. For Target Tracker, you can do a USO export and create the accounts with the same credentials. Depending on the VLE, if it allows Shiboleth integration, pretty sure Atomwide should be able to help.

 

Thanks all all your inputs.

 

Yes I know there is auto sync but it is not free with the services it is an add on package. But one off payment if I am right.

 

The only problem I have is we have user name created locally so now I need to sync with LGFL and provide every user new username and password.