I don't think there's a way to do SSO with any LDAP, but I'm really ignorant when it comes to Apple, so maybe that's the way OpenDirectory works!
There are two different non-SSO authentication modes: "Basic authentication" and "Transparent with authentication." Basic auth requires setting the clients' browsers to point at the proxy, and that's the best use of the Astaro HTTP/S Proxy.'
Remember that an 'HTTP/S Profile' applies to an entire subnet. Within each profile, you can have multiple filter assignments, each of which can apply to a different LDAP group.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
I don't think there's a way to do SSO with any LDAP, but I'm really ignorant when it comes to Apple, so maybe that's the way OpenDirectory works!
There are two different non-SSO authentication modes: "Basic authentication" and "Transparent with authentication." Basic auth requires setting the clients' browsers to point at the proxy, and that's the best use of the Astaro HTTP/S Proxy.'
Remember that an 'HTTP/S Profile' applies to an entire subnet. Within each profile, you can have multiple filter assignments, each of which can apply to a different LDAP group.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
