We are using SDL Tridion Web/Sites Cloud (8.6) and have a SSO implementation, so users are authenticated via a third party application (Azure AD in our case). We want to host a few custom pages, but cannot find any information about configuring the application that runs these to leverage SSO (otherwise users of the custom pages will not be able to log in). Has anyone done this?
I tried hosting the pages in a sub application of the main SDL Web IIS application, but it is prompting me for a username and password, rather than using SSO, so I guess some further configuration of this sub application is needed.
UPDATE I added the SAML Authentication Module (and removed the Ldap one) in the web.config of my custom page application:
<add name="SAML20AuthenticationHttpModule" type="Tridion.Security.Web.SAML20AuthenticationHttpModule, Tridion.Security, Version=220.127.116.115, Culture=neutral, PublicKeyToken=ddfc895746e5ee6b" /> <remove name="LdapAuthenticationHttpModule" />
Now I don't get a login prompt, but do get stuck in a 3 request loop:
Looking at the requests in Fiddler, the SAML cookies are passed on in request 1, so I am not sure why it still thinks I need to be authenticated (and thus returns the HTML with redirect, rather than my custom page).