Import the WebSphere LTPA key into Lotus Quickr

Import the WebSphere LTPA kethat you retrieved from the IBM WebSphere Portal server into a Web SSO configuration document so that the same token can be used for single sign-on to the IBM Lotus Quickr server and the WebSphere Portal server.

1. In the Lotus Notes client, open the NAMES.NSF file on the Quickr server to include in single sign-on.

2. Click Configuration > Web > Web Configurations to open the Web Configurations view.

   If there is a-Web SSO Configurations- image with a Web SSO Configuration for LTPA document, the Web SSO configuration document already exists, continue to either step 3 or step 4 as appropriate.

   If no Web SSO configuration document exists, skip to step 5.

3. If a Web SSO configuration document already exists and contains the WebSphere LTPA key:

   1. Open the document on the server where it was created, and add the name of the Lotus Quickr server to include in single sign-on to the Domino Server Names field in the document.

   2. Replicate the change to any other Lotus Quickr servers in your site by typing the following command on the Lotus Quickr server console on the source server (server where we added the new server's name):

      rep server/org_name names.nsf
      

   3. For the change to take effect, restart the Lotus Quickr server where you typed the command.

   4. Proceed to Test single sign-on.

4. If a Web SSO configuration document already exists but contains a different key (for example, a kethat was created when Sametime was installed), or if we are unsure if it is the same key exported from the WebSphere Portal server, delete the unwanted key as follows:

   1. Locate the Web SSO configuration document.

   2. Set Session authentication to disabled for each participating server listed in the document.

   3. Delete the Web SSO configuration document or rename it to something other than "LtpaToken".

   4. Replicate the change to any other Lotus Quickr servers in the site by typing the following command on the Lotus Quickr server console on the source server (where we added the new server's name): rep server/org_name names.nsf

   5. Continue to step 5.

5. Create a new Web SSO configuration document as follows:

   1. Click Configuration > Servers > All Server Documents.

   2. Click the Web action button, and select Create Web SSO Configuration from the drop-down menu.

   3. Type the domain suffix in the DNS Domain field. This should match the Domain Name you entered in the WebSphere Portal server.

      The domain suffix (including the period) is the part of the domain address that is common to all the Lotus Quickr servers to include in single sign-on.

      For example, the domain suffix of a server called sales.renovationscorp.com is renovationscorp.com

   4. Add the hierarchical names of the Lotus Quickr servers that will participate in the SSO domain in the Domino Server Names field.

      For example, sales/renovationscorp.

      You do not need to enter the name of the WAS.

   5. Select Import WebSphere LTPA Keys from the Keys menu, and then click OK.

   6. Type the path and name of LTPA key file, and then click OK.

   7. Type the password for the LTPA key, and then click OK.

   8. Click OK to the message that states that the key import is successful.

   9. Click Save & Close.

Parent: Configure SSO between WebSphere Portal and Lotus Quickr services for Domino