SSO (AEN 4.1.1)
===============

.. raw:: html

    <div class="section" id="single-sign-on">
    <h1>Single Sign On<a class="headerlink" href="#single-sign-on" title="Permalink to this headline">¶</a></h1>
    <p>AEN&#8217;s Single Sign On (SSO) capability creates a new authentication provider
    which defers to Anaconda Enterprise Repository for login and uses the
    authentication cookie from Repository.</p>
    <p>To enable this feature, deploy AEN and Repository on the same machine
    and modify the following config files.</p>
    <p>In the AEN Server&#8217;s config.json located at
    <code class="docutils literal"><span class="pre">/opt/wakari/wakari-server/</span></code> <code class="docutils literal"><span class="pre">etc/wakari/config.json</span></code> add the following:</p>
    <div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">{</span>
    <span class="n">EXISTING_CONFIGURATION</span><span class="p">,</span>
    <span class="s2">&quot;SECRET_KEY&quot;</span><span class="p">:</span> <span class="s2">&quot;&lt;repo signing secret&gt;&quot;</span><span class="p">,</span>
    <span class="s2">&quot;REPO_LOGIN_URL&quot;</span><span class="p">:</span>
      <span class="s2">&quot;http://example_repo.com:8080/account/login?next=http://example_repo.com/&quot;</span>
    <span class="p">}</span>
    </pre></div>
    </div>
    <p>Copy the SECRET_KEY from the Anaconda Repository configuration file.</p>
    <p>In the AEN Server&#8217;s wk-server-config.json located at
    <code class="docutils literal"><span class="pre">/opt/wakari/wakari-server/</span></code> <code class="docutils literal"><span class="pre">etc/wakari/wk-server-config.json</span></code> modify
    the following line:</p>
    <div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">{</span>
    <span class="n">EXISTING_CONFIGURATION</span><span class="p">,</span>
    <span class="s2">&quot;accounts&quot;</span><span class="p">:</span> <span class="s2">&quot;wk_server.plugins.accounts.repo&quot;</span><span class="p">,</span>
    <span class="p">}</span>
    </pre></div>
    </div>
    <p>To activate the changes restart <code class="docutils literal"><span class="pre">wakari-server</span></code>:</p>
    <div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sudo</span> <span class="n">service</span> <span class="n">wakari</span><span class="o">-</span><span class="n">server</span> <span class="n">restart</span>
    </pre></div>
    </div>
    <p>Single sign on is now enabled.</p>
    </div>
