5 Replies Latest reply on Feb 28, 2008 11:53 PM by Hemen Kapadia

    Signle Signon

    Level 1
      Hello,
      I'm trying to implement Single Signon for ColdFusion, Flex and AIR on our company Intranet. User might start up several applications based on any of the three technologies. I would like to have them logon just once instead of for every application. If this were just ColdFusion and Flex on the web server, I can use the CGI.Auth_User to get the person's login and check their permissions. But when they are running Flex applications on their PC or in an AIR wrapper, the Auth_User always returns a blank.
      I need to use a Session variable that all three can get to. Are there any examples around?
      Thanks for your help
      Scott
        • 1. Re: Signle Signon
          Level 1
          Sorry, I meant Single Signon.

          Also, the reason we wanted to use AIR was some of the time the client will be disconnected, so there won't be a server to ask about the session variables. Is there a way to ask the OS (windows XP) for the name of the person who is logged on? Or will this violate the security sandbox? I just want to get the windows environmental variable %USERNAME%. If not, I'll have to figure out how to use the Smart Card reader API.

          Scott
          • 2. Re: Signle Signon
            Hemen Kapadia
            hi emerys,

            I am trying something similar to what you are trying to do. However i am not worried about running my application in AIR.

            I just want the flex application should detect my windows login. To do this I am running Coldfusion 8 with IIS as the webserver. the default site for iis is configured to get Windows credentials.

            I cant figure out how to pass them to the flex app. can you help me?

            Thanks,
            Hemen
            • 3. Re: Signle Signon
              Level 1
              Hemen,
              It sounds like we have a very similar setup.

              I created a cfc with the following contents:
              <cfcomponent>
              <cffunction name="GetUsername" access="remote" returnType="string">
              <cfreturn #cgi.auth_user#>
              </cffunction>
              </cfcomponent>

              Short and sweet. The works great if you are running the Flex from the server, but it runs into trouble if you run it from your PC or the Flex Builder. I'm not sure why.

              Scott
              • 4. Re: Signle Signon
                Hemen Kapadia Level 1
                Hi emerys,

                Thanks for your input. I did manage to get it working.

                I am not sure what you mean by "run it from PC or the FLEX builder". I tried running the flex app from flex builder and it runs fine. It did display my login id.

                Thanks and Regards,
                Hemen.
                • 5. Re: Signle Signon
                  Hemen Kapadia Level 1
                  and i could even get my login id when i simply run the SWF in a standalone flash player from my pc HDD
                  -
                  -Hemen