Kinetic - Azure AD Disable Basic Authentication in Browser

Kinetic ERP
, , ,
21

I think each app server always gets Basic Auth but then you can add others.

1 Like
22

My manager want that all users must login using Azure AD not using basic authentication

1 Like
23

Understood. What is your plan if Entra is unavailable?

24

Is there a way I can force web users to login only through Azure AD

25

We will redeploy the application to accept basic authentication

26

Even I am looking for a dynamic approach for certain users to allow both basic and azure ad method

27

Unless someone else has other ideas (like @olga), the only way I know right now is to not give the user the password.

1 Like
28

I was not working with this, ask someone else

1 Like
29

no, it is also applied to AAD and IDP, not only windows SSO.

2 Likes
30

I can confirm that using the SSO Required flag works for us 2024.1

3 Likes
31

If there’s not a flag to put on the url that restricts which authentication model is prompted, I would file a bug report since it appears should restrict by the SSO flag.

1 Like
32

And as @josecgomez is saying, the flag does work.

Can you do a screen recording @Mohamed_Yusuff_S of how you have required turned on and you go to browser login and all of a sudden it lets you pick basic?

Thanks,

Utah

33

Our environment has 2022.6 version . It will be big challenge if we migrate to the newer version which doesn’t have desktop client

34

That’s what I was seeing as well in 2023.1… where I would have RequireSSO, but then they could drop down the basic auth.

You can see me on this thread doing the same thing you are: Using SSO on browser prompts me with a windows login, anyone know why? - #20 by andrew.johnson

Well actually @TobyLai was the one saying that they were trying to disable basic auth I think and that there was a dev task out there to fix it TASK7247870.

35

Great idea I will share the video recording now

1 Like
36

2024.1, the version that Jose is using, still has the desktop client. Kinetic 2025 will too. Starting with 2026.1 will be the first browser only version. But I’m confused. You want SSO in the browser…and SSO works in the client. :thinking:

1 Like
37

They don’t want anyone to be able to use basic auth to login for anything.

That’s what I am gathering. I think the video will show more.

2 Likes
38

That’s pretty effective…

And if they know their password, reset it and email it to yourself (not to them).

1 Like
39

It’s just someone could brute force.

1 Like
40

The video recording for your review

1 Like