SuO WEB with AD-login and PocketCRM

Hello

We have set up a SuO 8 SR4 WEB-installation with AD-login, and want to use included netserver as the Pocket-URL/NetServer. Is this supported? 

We set up anonymous access (enabled) for the entire web site, except the login page, and SSO works for the web users. 

The result for the Pocket-application, on the other hand, is that it fails to reach ../remote/services80/ , so it does not show the login-page. 

If we turn off SSO the Pocket-application stars working again. 
It is ofc possible to set up an own NetServer for the Pocket, but we want to use "all in one", if possible. 

Any suggestions/ideas? 
If the setup is supported, i can supply some more information/screenshots of the setup, but i suspec it is not

 

//Eivind


 

RE: SuO WEB with AD-login and PocketCRM

Hi Eivind,

According to this page, 8.0 SR4 should be using the services82 endpoint. Could this be something?

FYI, as this is a technical configuration issue, I have moved this post over into the technical forums. 

Best regards.

Av: Tony Yates 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

Ah, you are correct, services82 is for SR4. It doesnt help/make a difference in this case unfortunately..

Thanks for putting this in the correct category, i was unsure where to put it :)
 






Av: Eivind Johan Fasting 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

Can you explain a bit more what you expect?

AD Authentication: Verifi user name and password against AD (Instead of SuperOffice)

SSO: (Single Sign On?): Do not show login page, Just tranfer computer/AD user identity to CRM web?

Pocket CRM can not support SSO.

 

Av: Erik Eide 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

I see i have been a little unclear in my initial post, let me try to explain better:

We set up the users with AD-login, and set up the IIS to accept/use SSO (single sign on). The way we do this on the IIS is to change the authentication on the login.aspx to use Windows Authentication:
 

For the rest of the site we set up both "Anonymous Authentication" and "Windows Authentication". 

Now the users get SSO in the WEB-application, and web tools/maillink is also working as expected (accepting windows credentials).

PocketCRM does not have its own application/NetServer, so we expose web services on the web-application (the netserver included) and expect https://mydomain.com/remote/services82/ to be our Pocket-Url.

When we insert this URL on the phone, in the pocket-application, it does not connect successfully and we are stuck on the 'configure pocket-url'-page (not sure what you call this, it is the first configuration-screen for the pocket-application). 
PS: It does not say it fails to connect, but it just goes back to the URL-config after a couple of seconds. 

Now, if we go back to the IIS and set it up to NOT use Windows Authentication, and use basic & anonymous for the whole website (including login.aspx) instead, then https://mydomain.com/remote/services82/ starts working on the pocket-application and we get the username/password-screen as expected.
The users now have to input their username/password to log in to WEB, since we disabled SSO on the IIS. 


//Eivind
 

 


 



  

Av: Eivind Johan Fasting 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

Hi,

You need to setup a NetServer endpoint for Pocket CRM with basic authentication.

if you expose  NetServer using the wesite and Windows authentication pocket would not work..

/Jan

Av: Jan Andersen 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

ahà, so 'my' setup explained above is not supported then(?).. Or can i change the authentication for ../services82/ to use basic authentication(for only services82) without it 'messing up' anything for WEB?
 

Av: Eivind Johan Fasting 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

That's correct.

I haven't tested  setting this on the webservice site it but it's worth a shoot.

Otherwise you must setup a new instance.

 

/Jan

Av: Jan Andersen 8. feb 2017

RE: SuO WEB with AD-login and PocketCRM

Ok, thank you for your swift response :)

//Eivind 

Av: Eivind Johan Fasting 8. feb 2017