That is sort of complete if, I think, your IBM i is your domain controller. We use a Windows AD and Kerberos and it is completely automated in rolling out users. It involves using a CHGUSRPRF command to create the EIM and the target association then use an API (eimAddAssociation) to create the source association. It's doable, but I could only do this as we have a C compiler on the IBM i.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Justin Taylor
Sent: 20 June 2018 18:33
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: Single SignOn (SSO)
Is that complete? When I create new users in iNav, it lets me create the EIM entry but I still have to go in and finish it up. I think it adds the IBMi user, but I have to add the Windows user to the EIM entry manually.
-----Original Message-----
From: Mark S Waterbury [mailto:mark.s.waterbury@xxxxxxxxxxxxx]
Sent: Wednesday, June 20, 2018 12:14 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Single SignOn (SSO)
Something like this:
CHGUSRPRF USRPRF(xxxxxxxxxx) ... EIMASSOC(*USRPRF *SOURCE *ADD
*CRTEIMID)
perhaps?
On 6/20/2018 12:41 PM, Jerry Draper wrote:
We have SSO set up on our system and now will be "enrolling" hundreds
of users.
We want to do it in batch on the db2 side and not in ACS.
What are the IBM I cmds?
Thanks,
Jerry
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD
________________________________
McColl's Retail Group, McColl's House, Ashwells Road, Brentwood, Essex CM15 9ST
This e-mail including any attachments is intended only for the addressee named above and it may contain confidential or privileged information. If you are not the intended recipient please notify the sender and note that the contents must not be disclosed to anyone else, no copies can be taken and all existing copies must be destroyed. McColl's Retail Group will not be liable for any error in transmission. You should carry out your own virus checks before opening any attachments. Opinions, conclusions and other information in this message and attachments that do not relate to the official business of McColl's Retail Group are neither given nor endorsed by it.
midrange.com
