XWIKI and Single-Sign-On (SSO)

[bstewart]

If you run XWiki on Windows, you can use the Waffle library files to perform WIA (Windows integrated authentication); this works nicely for our environment. Basics:

How to: Integrate Waffle in XWiki using Tomcat on Windows

How to: Integrate Waffle in XWiki using Tomcat on Windows Make sure to install the LDAP Authenticator extension (https://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/). Run the Tomcat service using a domain service account. You will need to set the service principal name (SPN) for the service account as noted in the Waffle documentation (https://github.com/Waffle/waffle/blob/master/Docs/faq/NegotiateFailsWith401.md). Make sure that the domain service account has permiss…

Basic video guide:

How to: Install XWiki on Windows

My modest contribution: I created some videos showing how to install PostgreSQL and XWiki on Windows. Installing PostgreSQL on Windows using SSPI: https://www.youtube.com/watch?v=GWb7t8J73Fc SSPI is useful because you can authenticate to the PostgreSQL database using the Windows account credentials - all you need is a Windows domain account with the same name as the PostgreSQL database account. Installing XWiki on Windows: https://www.youtube.com/watch?v=c2xUsnuDsBE This video presumes Postg…