NAC and WLC single sign-on

[smjaggers]

Hello all,

I am tring to configure single sign-on between NAC 4.1.1 and a WLC using ACS. Users are authenticating correctly when manually entered. We have configured the accounting packets to be passed between the CAS and ACS, as well as between WLC and CAS. Does anyone have configuration tips for WLC SSO?

Thanks,

Shawn

[umedryk]

The HTTP Form protocol is a common approach to SSO authentication that can also qualify as a AAA method. It provides a secure method for exchanging authentication information between WebVPN users and authenticating web servers. As a common protocol, it is highly compatible with web servers and web-based SSO products, and you can use it in conjunction with other AAA servers such as RADIUS or LDAP servers. As with SiteMinder, the security appliance serves as a proxy for WebVPN users to an authenticating web server but, in this case, it uses HTTP Form protocol and the POST method for requests. You must configure the security appliance to send and receive form data.

http://www.cisco.com/en/US/products/ps6121/products_configuration_guide_chapter09186a00806a81f4.html