Skip to main content
Planview Customer Success Center

Enterprise site not authenticating with IE (SSO ISAPI)

Symptoms
The production enterprise site is no longer authenticating. We reset SSO on the web server. We get authenticated browsing to the site from the server. We can use chrome from a client and get authenticated but IE is not working. 
 


Resolution
When two SSO sites are configured, Client browsers (specifically IE) seem to ignore or not automatically switch to the authentication
provider types. NTLM must be set to the first provider type for SSO authentication to work correctly.

1. Go to IIS on the Changepoint Application Server.
2. Browser to the Changepoint Enterprise Web Site Folder
3. Browse to the RP-STS-ISAPI folder
4. In the Main Window double click the "Authentication" icon located in the IIS section.
5. Select the Windows Authentication in the list of auth types
6. On the Right hand pane, click on the Providers Link
7. In the Providers List, set the NTLM Provider type to be at the top of the list ie NTLM will be on top of Negotiate.

Note: This setting must be set on all SSO sites (if the authentication issue occurs)

8. perform an IIS reset and ensure to clear the clients browser cache.