Frog VLE Single Sign On?

[ihaveaproblem]

Hi,

 

Is it possible to do SSO with frog?

I read here that you can with a program called frog live but cant find any information on it.

http://www.edugeek.net/forums/virtual-learning-platforms/63946-vle-has-sso-homedrive-areas-ad-connection-email-connection.html

 

Anyone have any more info on it?

 

thanks

[siuko]

From an email with a Frog representative... hopefully they wont mind...

 

The application (called FrogLive) sits on the PC, when a user logs in to Frog from any networked machine that has FrogLive installed, it captures their username and password and saves the ‘cookie’ in their networked ‘my documents’ as a hidden file.

 

Next time they log in to the school network, FL ‘finds’ the cookie and knows who they are, if they launch Frog they are automatically signed in. They can also download FrogLive at home and have SSO from there too, but as they won’t have a network the cookie is stored on that particular machine, so they need FL on every machine they may use.

[ihaveaproblem]

Thanks Siuko, very helpful info.

Do you a know rough cost of Frog Live?

[MicrodigitUK]

Frog Live is free as part of your Frog Teacher VLE Support..

[dsm]

Frog Live allows you to open a document saved on the VLE, edit it and save it straight back to the VLE. This prevents the problem that you find with most other VLEs where you have to download a document, edit it, save it locally, delete the copy on the VLE and then upload the new copy.

 

Single Sign On to the VLE works with an Active Directory domain. In the 'Server Settings' just type in your domain name and an IP address of one of your domain controllers. This will allow staff/students to log in to the VLE with their normal username and password.

 

Regards

[danIT]

Anyone else concerned by the security implications of storing a hidden 'cookie' in the users My Documents folder on the network? Could have interpreted the above email incorrectly?

[plexer]

Is it any worse than storing any other piece of information in a users home folder? for admins sure it's more of risk but for a normal user not so.

 

Admin rights can be given using 2-factor auth as well for added security.

 

Ben

[frogwoman]

What was not mentioned was the fact that FrogLive is configurable depending on the users Frog user profile, if you don't want the users to have the option to save the password/username etc, then uncheck the boxes. This really isn't an issue.

 

For those that want to change the FrogLive defaults, Toolkit, Admin, profile, select profile, FrogLive Tab.

[FragglePete]

Just a quick post to update this; I've just enabled the new Frog Active Directory Single Sign On element on our Frog Server and it seems to work nicely!

 

Homepage is now set to http://frogserver/ntlm instead of just http://frogserver and the users are now logged into their Dashboard within Frog! About time! Now going to see wether or not Froglive is still really needed. You do have to do a tweak on the console of the Frogserver (not the toolkit); there is a PDF available with instructions.

 

Pete

[MicrodigitUK]

Just a quick post to update this; I've just enabled the new Frog Active Directory Single Sign On element on our Frog Server and it seems to work nicely!

 

Homepage is now set to http://frogserver/ntlm instead of just http://frogserver and the users are now logged into their Dashboard within Frog! About time! Now going to see wether or not Froglive is still really needed. You do have to do a tweak on the console of the Frogserver (not the toolkit); there is a PDF available with instructions.

 

Pete

 

Pete. If you are running IE8 of IE7 there are currently some bugs with frog file system access and rss brick. It should be fixed in the October build. Just a heads up if you are pushing it out to your users.

[FragglePete]

Thanks. It would also appear that this is Broken. We've been having issues were it would work one day and then stop the next with the Frogsever being disconnected from the Domain.

 

I spoke to them this morning and its a known issue and they believe they know whats causing it. Turning it off for now; real shame.

 

Biggest issue at the moment is that IE9 treats all Intranet pages in Compatability mode which has also broken a few things for us (namely file upload which causes IE to crash) - just nailing down the GPO at the moment that causes this.

 

Pete

Edited September 14, 2012 by FragglePete

[howartp]

Yeah, we tried SSO earlier this week but had to turn it off again.

 

It worked fine (as far as we know) whilst we had it turned on, but it wouldn't let us sign in to the toolkit or as any of our test users.

 

Also, not sure whether it's related or happened some other time, but when my colleague renamed a menu item after we'd turned on SSO, the whole menu just disappeared - deleted - for no reason whatsoever. Probably not directly related to SSO, but might have been introduced in the same update/patch as SSO was released with. It does have one benefit, in that we need to recreate the menu from scratch - it got too full and complex, so we've redesigned it whilst we're at it.

 

Peter

[JamesFromFrog]

Hi folks,

 

I've just poked my nose into this thread to mention that we're currently working on fixes for a couple of issues with AD SSO at the moment.

 

Despite having completed a successful beta programme with a number of schools, issues have been identified with AD SSO, post-release.

 

Our teams have looked into these issues and we are confident that we have identified the root cause of the issue and working towards a fix. In the meantime, it is our advice that if you are experiencing issues with AD SSO, or issues that you believe have only started since your implementation of AD SSO, that you cease using it and resort to the normal method of logging in.

 

Thanks,

James Shackley

Support Manager

[backwellschool]

Is it still in beta then? what are the issues we should look for? seems to be working ok for us so far, although it doesnt work on our apple macs. ta.

[MicrodigitUK]

Is it still in beta then? what are the issues we should look for? seems to be working ok for us so far, although it doesnt work on our apple macs. ta.

 

Frog (James and team) have found a work around with a registry fix for the issues with IE8 that we have tested and look to have fixed 95% of the issues. Issues are around access to files stored on the frog file system, creating homework, creating frog pages, forms brick and rss feeds brick.

 

If you are using IE9 you will be ok.

 

As for Apple Mac SSO it will never work as Frog have implemented using NTLM a Microsoft technology. When I asked one of the Frog Dev team why they didn't use Kerberos to support Mac I was told it would have been a security risk to access to there system files on the server.

[MicrodigitUK]

The registry fix for the issues with IE8 NTLM and Frog AD SSO is:

 

You cannot post data to a non-NTLM-authenticated Web site

[thetruthhurts]

Thanks MicrodigitUK. Frog seem to ignore macs just like capita.........

[mthomas08]

Dont think Frog are ignoring Macs, they like me just refuse to make it a top priority

 

We have about 40 of them compared to our other almost 1000 PCs/Laptops. Anyway isnt FrogOS4 designed for different OS's and iPads etc.

 

As for the SSO I did read something about the next update containing fixes, we havent had the time to release SSO yet so had no trouble. Other than our DFE changed causing a major issues - thank you government officials.

[lordasb]

question got a school running 150 netbooks windows 7 home, no domain, no login, kids just use the same machine all the time. could they use this? also do frog have a a fix yet for ie9 ? wife still has to use firefox at home as she cant download or upload via IE. this will start to effect all the 150 as they where not running IE9 yet but are now.

[MicrodigitUK]

question got a school running 150 netbooks windows 7 home, no domain, no login, kids just use the same machine all the time. could they use this? also do frog have a a fix yet for ie9 ? wife still has to use firefox at home as she cant download or upload via IE. this will start to effect all the 150 as they where not running IE9 yet but are now.

 

Frog NTLM SSO needs a domain to work. So you would be better using old Frog Live SSO on 7 Home computers. But if multiple users are using them with the same user acount, you don't whant SSO!

[lordasb]

thanks microdigituk

 

the school didnt even know there was a sso for 7 home computers.... would i find something somewhere on this? got a linky handy?

 

each student has its own machine so that would not be an issue.

[MicrodigitUK]

You must first logonto a frog server and then click on the link in the top right for the frogcommunity.

 

Then open the link:

 

http://www.frogcommunity.com/index.phtml?d=2370743

[lordasb]

well i dont have login but that link worked anyway

[MicrodigitUK]

well i dont have login but that link worked anyway

 

LOL nice and secure then

 

You might want this one also.

 

Frog Live - Frog Knowledge Base