SSO with AD

phaelax

Been reading all kinds of info about this but all the threads I've seen either have incomplete info or no longer relevant. The ldap authentication works fine but not sure how to do the auto-login bit without a password. I see a lot of people mentioning "http passthru" plugin but I can't seem to find such a plugin anywhere. What does this plugin do exactly and is it necessary for single sign on? Can anyone point me in the right direction?

OST 1.14.3
php 7.2
Apache on CentOS 7

ntozier

You can get the Authentication:: HTTP Pass-Through plugin from the same place that you got the Authentication:: LDAP and Active Directory plugin. Which is the osTicket web site or explicitly from here:
https://osticket.com/download/#ostPlugin

I would recommend the following thread for more resources:
https://forum.osticket.com/d/94634-http-passthru-authentication/4

phaelax

I'm still unclear what needs to be passed into the headers or how this plug works. Maybe someone can let me know if I'm on the right track here.

The passthru plugin looks for the REMOTE_USER header, containing the name it'll use to search for in the ldap lookup. Such as the sAMAccountName value. If it finds them, it'll then look for a matching user name the osticket user db. If the user isn't found in osticket, it'll create them. Does this sound correct?