Configuring Authentication
The iGrafx platform supports a variety of authentication schemes, providing multiple methods for recognizing which users are currently logged in.
The iGrafx platform supports a variety of authentication schemes, providing multiple methods for recognizing which users are currently logged in.
Profile: spnegosecurity
Problem
After updating to version 18 or later, you may encounter issues with Kerberos SSO no longer working. In the igrafx\_server.log file, you will see a "negotiate header was invalid" error followed by an "Encryption type RC4 with HMAC is not supported/enabled" or similar error. The reason for this is that Java has dropped support for HMAC and 3DES encryption with release 11.0.17 - to fix the problem, you will need to enable AES128/AES256 encryption for Kerberos.
Problem
The metadata for Single Sign On via SAML can be provided via two different mechanisms. It can either be uploaded to the platform itself or provided as a https\-based URL from which the metadata can be downloaded. This article explains the benefits of remote metadata and the requirements for both the iGrafx Cloud and on-premises (Datacenter) installations.
Profile: samlsecurity
Profile: sitemindersecurity
Question
Problem