Automatic login via url

fredendrix

Hi!

Is there any way we could "bypass" logon screen while navigating DM server via a direct link?

For example, i'd like to publish a link for release notes to some users and i'd like to "auto-login" guest users. I've tried some kind of:

http://srviis04:666/projects/crm/releas ... word=guest

or

http://guest:guest@srviis04:666/project ... 1.1.2.6739

But neither works... Always redirected to login page...

Any idea?

Thanks!

DavidRG

Your best option here is to switch to Windows Authentication. You can do this by running the "Server Tools" app (you'll need to remote desktop to the Deployment Manager server to run it). When using Windows Authentication on an intranet site, most web browsers will auto-login by default, but if they don't, then you can always enable it.

For security reasons, we don't support auto-login using Deployment Manager authentication. Section 3, "LOGIN CSRF" of this research paper details the kind of things that can go wrong if we did: http://seclab.stanford.edu/websec/csrf/csrf.pdf

Also, for security reasons, we don't have a guest account and don't recommend one. Giving each user their own account makes it much better to both audit changes, as well as lock read access down.

fredendrix

Ok then! I'll switch to Windows Auth... Thanks!