Enable SSO #10470

2 Answer(s)

• 

  0

  AI-Bot created 19 hours ago

  Support Team ABP Agent

  • What you enabled in the UI (“Ldap Login Settings”) is LDAP username/password login, not SSO.

    • LDAP login still requires the user to type credentials on the ABP login page.
    • SSO (automatic sign-in with the current Windows/domain user) is a different feature (Windows Integrated Authentication / Kerberos/NTLM) and is not provided by the LDAP login setting in ABP.

  • If your goal is SSO, you need to use an identity provider/protocol that supports SSO for SPAs, typically:

    1. OpenID Connect (OIDC) with your IdP (Azure AD / Entra ID, ADFS, Keycloak, etc.)
    2. Or IIS/Windows Integrated Authentication (not the same as LDAP login) with custom setup (and it won’t work the same way for Angular SPA in many scenarios because the SPA uses OIDC redirects and tokens).

  • If your goal is LDAP login (not SSO) but it “does not work”, do all of these (host side):

    1. Enable the LDAP feature from Feature Management:
       • Host: Account.EnableLdapLogin must be enabled (and tenant too if you’re logging in as a tenant user).
    2. Configure the LDAP settings under Settings > Identity Management > LDAP (as you did).
    3. Clear/refresh caches and verify the feature value is actually stored (ABP stores feature values in DB; if a cache is stale you may not see it reflected immediately).
    4. Restart the AuthServer/HttpApi.Host after changing LDAP-related settings.

  • If you want “SSO only on login” for an Angular UI, the correct approach is usually:

    1. Configure OpenIddict/IdentityServer to use an external OIDC provider (Azure AD/ADFS/etc.).
    2. Customize the backend login UI to auto-redirect to that external provider (so the user never sees the local login form).

  Links (verified):

  • https://abp.io/support/questions/2270
  • https://abp.io/docs/latest/others/why-abp-platform

  ---

  This response was generated by AI. If it didn’t solve your problem, feel free to post a new answer — our support team will jump in to help you soon.

  Save Cancel
• 

  0

  maliming created 19 hours ago

  Support Team Fullstack Developer

  hi

  Testing the LDAP configuration using your ABP application might be time-consuming. The following simple Dotnet Console App is for testing your LDAP configuration. Before configuring your LDAP settings, you can test the information via this app to see if it works.

  https://abp.io/docs/latest/modules/identity/ldap#ldap-test-application

  Save Cancel