We are still on 8.03.305, so I can't guarantee any of this still works in .400+. We have had no problems with SSO since we figured out a few things.
1. There cannot be a local user account on the computer with the same UID as the Domain/Vantage ID.
2. The computer cannot have the same name as the Domain/Vantage ID.
We established a practice of logging in as the user when we create a new account, to set the initial password. Otherwise, it will ask to set the password the first time they login. We typically just set it to something random, as the user will never need it.
As for logging in as a different user than the one logged into the PC, once you login with SSO, you can use the Options > Change User ID to switch users (Doesn't seem to recognize the Require SSO flag at this point.). Of course they will need to know the users password to login this way.
Hope this helps.
Craig
1. There cannot be a local user account on the computer with the same UID as the Domain/Vantage ID.
2. The computer cannot have the same name as the Domain/Vantage ID.
We established a practice of logging in as the user when we create a new account, to set the initial password. Otherwise, it will ask to set the password the first time they login. We typically just set it to something random, as the user will never need it.
As for logging in as a different user than the one logged into the PC, once you login with SSO, you can use the Options > Change User ID to switch users (Doesn't seem to recognize the Require SSO flag at this point.). Of course they will need to know the users password to login this way.
Hope this helps.
Craig
--- In vantage@yahoogroups.com, Mark Wagner <mjfw2003@...> wrote:
>
> Got it, that makes sense. Thanks Chris
>
> --- On Fri, 7/17/09, Chris Robisch <bluewine@...> wrote:
>
>
> From: Chris Robisch <bluewine@...>
> Subject: [Vantage] Re: Single Sign On - Some Users Only
> To: vantage@yahoogroups.com
> Date: Friday, July 17, 2009, 3:00 PM
>
>
> Â
>
>
>
> We've got Single Signon working but with a couple of caveats.
>
> If you want to login to Vantage with a name different than the Windows login, because you're at someone else's PC, login to the Citrix server via Web interface. You then give your own credentials and log into the Vantage/Epicor database of your choice.
>
> If you have generic Vantage logins where the Windows Login doesn't match the Vantage login, you have to set up a separate icon pointing to a different .mfgsys file where Single Signon is "false" instead of "true". So you need two icons, one with "true", one with "false".
>
> --- In vantage@yahoogroups .com, Mark Wagner <mjfw2003@ .> wrote:
> >
> > Thanks, I doubt I will come up with any better answers but if I stumble across something I will let you know
> > Â
> > Thanks for the responses
> >
> > --- On Fri, 7/17/09, LeAnn Marruffo <lmarruffo@ ..> wrote:
> >
> >
> > From: LeAnn Marruffo <lmarruffo@ ..>
> > Subject: RE: [Vantage] Single Sign On - Some Users Only
> > To: vantage@yahoogroups .com
> > Date: Friday, July 17, 2009, 1:40 PM
> >
> >
> > Â
> >
> >
> >
> > Yes, to no avail. Kid you not, I gave up. One thing we did discover,
> > though, is that you can't NOT have a domain name, no matter whether you
> > are single sign on or not. It's very unforgiving of that. Somehow I
> > thought that you would only need the domain name in user security if the
> > user was single sign on, but that's not the case at all.
> >
> > From: vantage@yahoogroups .com [mailto:vantage@ yahoogroups .com] On Behalf
> > Of Mark Wagner
> > Sent: Friday, July 17, 2009 10:33 AM
> > To: vantage@yahoogroups .com
> > Subject: RE: [Vantage] Single Sign On - Some Users Only
> >
> > Yes, thats exactly what I am seeing (we are also running Citrix) After
> > getting different domain setups to work (some users have
> > domain\username, others worked with just domain name) I've got both the
> > Epicor server and Citrix mfgsys files set to single sign on = true. Did
> > you modify the mfgsys on both the app server and Citrix?
> >
> > --- On Fri, 7/17/09, LeAnn Marruffo <lmarruffo@steren. com
> > <mailto:lmarruffo% 40steren. com> > wrote:
> >
> > From: LeAnn Marruffo <lmarruffo@steren. com
> > <mailto:lmarruffo% 40steren. com> >
> > Subject: RE: [Vantage] Single Sign On - Some Users Only
> > To: vantage@yahoogroups .com <mailto:vantage% 40yahoogroups. com>
> > Date: Friday, July 17, 2009, 1:23 PM
> >
> > We tried single sign on, and it gave us a lot of problems (407A). Of
> > course, we use Citrix, and that's apparently part of it. This is what we
> > saw:
> >
> > * Mfgsys file set to single sign on = TRUE
> >
> > o All user security could NOT have single sign on set to true for the
> > first login after creation (??)
> >
> > o After password setup the first time, could change to single sign-on
> > = true in user security
> >
> > o Users marked as single sign-on (security) were stable once you got
> > it to work once, until you cleared their password. (then you'd start the
> > cycle again.)
> >
> > o Users that were not marked for single sign on at creation had issues
> > after first login until you marked them for single sign on then turned
> > it off. (??)
> >
> > I finally decided I had better things to do with my time, and forced
> > everyone to log in every time. It might not be a problem dealing with
> > one login at a time, but we are a new implementation, and I'm managing
> > 40 users at a time, across 5 company go-live dates, some remotely...
> >
> > If you know of a procedure to set this up and start users that works
> > every time, please share it with us- the users who do not "roam" love
> > single sign on...
> >
> > Thanks!
> >
> > - leAnn
> >
> > From: vantage@yahoogroups .com [mailto:vantage@ yahoogroups .com] On
> > Behalf
> > Of Mark Wagner
> > Sent: Friday, July 17, 2009 10:05 AM
> > To: Vantage User Group
> > Subject: [Vantage] Single Sign On - Some Users Only
> >
> > We have some users that work remotely and VPN into the network without
> > logging into the domain, while all others are part of Active Directory
> > and using domains to login. Can I set single sign on for some users and
> > not for others? I modified the mfgsys file to set single sign on to True
> > so I'm not sure if I can be selective as to who uses it and who doesnt
> >
> > [Non-text portions of this message have been removed]
> >
> > Click here
> > <https://www. mailcontrol. com/sr/wQw0zmjPo HdJTZGyOCrrhg= =
> > njz2raqpAL7lSWnKPaJ wxW6c1kTQ2w7BIyW toBNtFUgrMg= => to report this
> > as spam.
> >
> > This message has been scanned for malware by SurfControl plc.
> > www.surfcontrol. com
> >
> > [Non-text portions of this message have been removed]
> >
> > [Non-text portions of this message have been removed]
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> [Non-text portions of this message have been removed]
>