Automatic login via url

Automated deployment for web applications and databases

Moderators: Mike Upton, justin.caldicott, Sean.newham, csmith, chirayu, DavidSimner, david.conlin

Automatic login via url

Postby fredendrix » Mon Sep 09, 2013 7:08 pm

Hi!

Is there any way we could "bypass" logon screen while navigating DM server via a direct link?

For example, i'd like to publish a link for release notes to some users and i'd like to "auto-login" guest users. I've tried some kind of:

http://srviis04:666/projects/crm/releas ... word=guest

or

http://guest:guest@srviis04:666/project ... 1.1.2.6739

But neither works... Always redirected to login page...

Any idea?

Thanks!
fredendrix
 
Posts: 24
Joined: Tue Dec 18, 2012 3:40 pm
Location: Quebec (Canada)

Postby DavidSimner » Tue Sep 10, 2013 9:51 am

Your best option here is to switch to Windows Authentication. You can do this by running the "Server Tools" app (you'll need to remote desktop to the Deployment Manager server to run it). When using Windows Authentication on an intranet site, most web browsers will auto-login by default, but if they don't, then you can always enable it.

For security reasons, we don't support auto-login using Deployment Manager authentication. Section 3, "LOGIN CSRF" of this research paper details the kind of things that can go wrong if we did: http://seclab.stanford.edu/websec/csrf/csrf.pdf

Also, for security reasons, we don't have a guest account and don't recommend one. Giving each user their own account makes it much better to both audit changes, as well as lock read access down.
DavidSimner
 
Posts: 49
Joined: Thu Feb 04, 2010 6:05 pm

Postby fredendrix » Tue Sep 10, 2013 2:17 pm

Ok then! I'll switch to Windows Auth... Thanks!
fredendrix
 
Posts: 24
Joined: Tue Dec 18, 2012 3:40 pm
Location: Quebec (Canada)


Return to Deployment Manager

Who is online

Users browsing this forum: No registered users and 0 guests