SSO and Load Balancing

As of 7.4.1:

·       SSO now works in a load balanced environment. We have deprecated the use of cookies (except for Remember Me feature) for SSO Authentication. SSO now stores the Customer Token in the session object. In order for SSO to work in load balanced environments, the SSO Web Site needs to use ASP Session State for Session management.

·       There is a Remember Me feature in SSO. If clients use this feature, SSO is going to create a cookie for authentication, but since there is a security risk, Remember Me is turned off by default. There are configuration entries to enable this feature.

·       SSO now allows sharing email addresses across users.

§       SSO has a feature for Resetting User Names. If multiple users are sharing the same email address, they will not be able to reset their user names. The only option for them would be to call customer service. The user name can be updated to whatever the user wants from Web Access Control screen in CRM360®. For more information, please see Editing a Constituent's Web Access in CRM360.

§       SSO has a feature for Resetting Password. If multiple users share the same email address, the password reset will reset the passwords for all users sharing the same email address. However, a staff person can reset a single user's password from the Web Access Control screen in CRM360. For more information, please see Resetting a Constituent's Web Password in CRM360.

·       Users cannot use Personify login to log in to the DNN Web Site as a host. Before an upgrade, users will have to set up a new page for host login and use DNN's Account Login module to log in as host.