Automatic login via url

fredendrixfredendrix Posts: 32
edited September 10, 2013 9:17AM in Deployment Manager
Hi!

Is there any way we could "bypass" logon screen while navigating DM server via a direct link?

For example, i'd like to publish a link for release notes to some users and i'd like to "auto-login" guest users. I've tried some kind of:

http://srviis04:666/projects/crm/releas ... word=guest

or

http://guest:guest@srviis04:666/project ... 1.1.2.6739

But neither works... Always redirected to login page...

Any idea?

Thanks!
· Share on Twitter

Comments

  • DavidRGDavidRG Posts: 60 Bronze 4
    Your best option here is to switch to Windows Authentication. You can do this by running the "Server Tools" app (you'll need to remote desktop to the Deployment Manager server to run it). When using Windows Authentication on an intranet site, most web browsers will auto-login by default, but if they don't, then you can always enable it.

    For security reasons, we don't support auto-login using Deployment Manager authentication. Section 3, "LOGIN CSRF" of this research paper details the kind of things that can go wrong if we did: http://seclab.stanford.edu/websec/csrf/csrf.pdf

    Also, for security reasons, we don't have a guest account and don't recommend one. Giving each user their own account makes it much better to both audit changes, as well as lock read access down.
    · Share on Twitter
  • fredendrixfredendrix Posts: 32
    Ok then! I'll switch to Windows Auth... Thanks!
    · Share on Twitter
Sign In or Register to comment.