How to configure SSO authentication

New User

When a new user is created, the selection in the Privilege column is extended and the line "Single Sign-On" is available.

In addition to the password, the user domain must also be specified for the authentication method "Single Sign On". If an Active Directory does not exist or is not used, this is the local PC name on which the CM client is started.

Start ConnectMaster with SSO User

For the "Single Sign-On" logon type, the "$" character must be passed as parameter %3 to CmStartUp.bat.

C:\cm\cm675\scripts\CMStartUp.bat ma CMPROD $

This can be done by configuring the shortcut properties.

This configuration can also be chosen directly during installation:

Additional information

On the database side, a new ConnectMaster-specific user CMAUTH has been set up, which is password authenticated and has read-only access to the CMSYS.US_USER table.

The user CMAUTH and his password is installed via a button in the admin tool or general installation procedures (create schema, etc.).

The password is only known to the code and must not be changed by DBA's!

The password is stored encrypted in the code and only decrypted at runtime.

You can check the function of the CMAUTH user or reset the password. Two new buttons are
available in the "System service users" area (on the left menu bar of the admin tool)

• Check CMAUTH

If this button is clicked, the stored password and the login to the database are checked

• Reset CMAUTH

Clicking the "Reset" button resets and checks the password.