Comments on: Using Windows Login Credentials for Single Sign On (NTLM authentication) http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/ Inside Oracle APEX - a blog that helps to get more out of Oracle Application Express (APEX) for your daily development work! Mon, 19 Dec 2011 12:04:44 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Apexive http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-45223 Apexive Tue, 06 Jul 2010 18:15:38 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-45223 never mind , it works now,,,NICE!! never mind , it works now,,,NICE!!

]]> By: Apexive http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-45222 Apexive Tue, 06 Jul 2010 18:14:33 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-45222 jhonny, The links you provided don't work, could you PLEASE update as I am working on the same exact thing for a client and would love to read your tutorial..... jhonny,

The links you provided don’t work, could you PLEASE update as I am working on the same exact thing for a client and would love to read your tutorial…..

]]> By: Ellamae Caves http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-30751 Ellamae Caves Mon, 05 Apr 2010 20:22:14 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-30751 I've just stumbled upon your site while searching for a tutorial on an related subject. Glad I did too. There's a lot I like. Anyway, you've been bookmarked and I'll be back soon. :) I’ve just stumbled upon your site while searching for a tutorial on an related subject. Glad I did too. There’s a lot I like. Anyway, you’ve been bookmarked and I’ll be back soon. :)

]]> By: Patrick Wolf http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-2293 Patrick Wolf Sun, 01 Mar 2009 17:00:27 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-2293 Hi, you are right. BTW, really nice article explaining Active directory and what's going on with mod_plsql. Patrick Hi,

you are right. BTW, really nice article explaining Active directory and what’s going on with mod_plsql.

Patrick

]]> By: jhonny http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-1892 jhonny Wed, 18 Feb 2009 18:55:24 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-1892 Patrick you should be careful not to trick readers into thinking that the pl/sql solution actually works :) As I've commented on jason's blog he doesn't authenticate against a domain controller. So mod_ntlm remains the solution. jason's solution is cool but as he says in response to my comment: "The example posted here was meant as a PL/SQL only solution for tricking the browser into providing an NTLM token, and the decoding that token and using that value as the user in an Application Express application. It was meant to be used in some Intranet scenarios, and is obviously not meant to be a security solution." So if you really want ntlm + apex you should go the mod_ntlm way. That's what I did. Martin Köb also has a really good tutorial but he doesn't include a way to have group membership checking against active directory. I know I've struggled enough with dbms_ldap to achieve it. I've written a tutorial that explains everything - from what active directory is - to how to have group membership. For those interested: http://withasmiletomeltathousandhearts.wordpress.com/2009/01/29/apex-windows-integrated-authentication/ Patrick you should be careful not to trick readers into thinking that the pl/sql solution actually works :)
As I’ve commented on jason’s blog he doesn’t authenticate against a domain controller. So mod_ntlm remains the solution.
jason’s solution is cool but as he says in response to my comment:
“The example posted here was meant as a PL/SQL only solution for tricking the browser into providing an NTLM token, and the decoding that token and using that value as the user in an Application Express application. It was meant to be used in some Intranet scenarios, and is obviously not meant to be a security solution.”
So if you really want ntlm + apex you should go the mod_ntlm way. That’s what I did.
Martin Köb also has a really good tutorial but he doesn’t include a way to have group membership checking against active directory.
I know I’ve struggled enough with dbms_ldap to achieve it.
I’ve written a tutorial that explains everything – from what active directory is – to how to have group membership.
For those interested: http://withasmiletomeltathousandhearts.wordpress.com/2009/01/29/apex-windows-integrated-authentication/

]]> By: Jason Straub http://www.inside-oracle-apex.com/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/comment-page-1/#comment-546 Jason Straub Mon, 24 Mar 2008 20:34:00 +0000 http://www.test.inside-oracle-apex.com/blog/using-windows-login-credentials-for-single-sign-on-ntlm-authentication/#comment-546 Patrick:<br/><br/>Thanks for the plug. I have incorporated your suggestions.<br/><br/>Jason Patrick:

Thanks for the plug. I have incorporated your suggestions.

Jason

]]>