T440P - Win 8.1 Fingerprint Single Sign on Issue

Hi,
I just bought the T440P laptop, and for some reason it never updated to win 8.1 pro from the CDs that were provided. So I installed Win 8.1 x64 Enterperise with Update (provided by my company). I downloaded all the drivers for win 8,1 x64 from the website and installed them. The issue that i am facing is while following the single-sign on guide i have checked (ticked) everything but when the system boots it asks for my fingerprint (power - on password) and then stops at windows login and asks for it again. Why isnt the single sign on working?
Below images show the settings in the fingerprint Manager Pro 8.01.26(x64). Any help will be apprecaited.
Also the guide says to click the power-on tick over the enrolled finger print. I cannot find this option, is it even possible to power on the machine (T440P) with the fingerprint with win 8.1 x64 ?
Thanks,
Usama

Hi,
Using kerberos authentication, users when logged in to windows environment need not enter any user name or password for logging into portal. Check these links for configurations.
http://help.sap.com/saphelp_nw2004s/helpdata/en/a4/385bef3bd14241b9c4f36bd779537d/frameset.htm
Regarding SSO between windows and portal
How To Identify which SSO(Windows Authentication ) is Implemented
Regards,
Harini S

Similar Messages

Wireless Network Policy Single Sign On Issue with Windows 8.1 only

I'll try to set this up as best I can. I have a laptop with a fresh Windows 8.1 install on it. It is on my domain, and I have a single GPO applied to it. In the GPO under Computer Configuration -> Windows Settings -> Security Settings ->
Wireless Network Policies I have created a Windows Vista or later policy. In the policy I have configured single sign on. I log into a local account on the laptop and plug it into a wired connection. I then run gpupdate on it. At that point I unplug
the network cable, and log off. Now, from the login screen I click Other user, and it looks like the screenshot below.
Notice that "Windows will try to connect to" is present. I can login using domain credentials, and single sign on works perfectly. Now if I reboot the machine, the "Windows will try to connect to" is gone and single sign
on does not work. If I log in with a local account and log out. The "Windows will try to connect to" is present again. I can login normally using domain credentials, and single sign on works perfectly again.
One other note: I installed a fresh copy of Windows 7 on the same model laptop, and put it in the same OU with that single GPO. Single sign on works perfectly with the Windows 7 machine every time. Including after reboots. Thank you, in advance,
for any advice or comments. I will be happy to provide additional information if it is needed.

I managed to get this to work properly in my environment. I realized that I needed to export the wireless profile from the Group Policy editor and import it on the client (by using Group Policy). I realized this while reading through this article:
https://technet.microsoft.com/en-gb/magazine/2007.11.cableguy.aspx
You can see the "Export..." button in the screenshot posted by keyserag above. Select the profile name, in the Group Policy editor Properties dialog, i.e. the item that keyserag has blurred in his screenshot, then click the "Export..."
button. You will be prompted to save the XML file.
I use Computer Configuration > Preferences > Windows Settings > Files to copy the XML file to the clients:
Destination: %WindowsDir%\WirelessProfileExportFileName.XML
I then use Computer Configuration > Preferences > Control Panel Settings > Scheduled Tasks to run netsh and import the profile:
Action: netsh wlan add profile filename="%WindowsDir%\WirelessProfileExportFileName.XML"
The PCs using my policies are now ready to logon without any need for additional manual actions.
I've left out some detail here, I assume everyone will do something a little different anyway. Let me know if you need more help with this.

Mail, Exchange, Acitve Directory and Single-Sign On Issues

I have a brand new MacBook Air with Mavericks. 10.9.3.
We are using a single sign on account setup for our machines. I enter my exchange log in details to access my account on my computer. It's labeled as a managed mobile account. When I open Mail, it takes forever to connect with the exchange server and download and sync new email. The activity monitor shows it constantly running. I send an email and it takes minutes until it actually sends. When I try to shut down mail I usually have to force quit it to close the app because it's doing some kind of syncing with the server.
I have all the same settings on a Mac Mini running 10.9.3 except I'm using a local user/admin sign-on. No issue there. So I think it's something with the single sign on on my Air. Any help would be appreciated!

Try a restart.
Do a backup, using either Time Machine or a cloning program, to ensure files/data can be recovered. Two backups are better than one.
Try setting up another admin user account to see if the same problem continues. If Back-to-My Mac is selected in System Preferences, the Guest account will not work. The intent is to see if it is specific to one account or a system wide problem. This account can be deleted later.
Isolating an issue by using another user account
If the problem is still there, try booting into the Safe Mode using your normal account. Disconnect all peripherals except those needed for the test. Shut down the computer and then power it back up after waiting 10 seconds. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. When you reboot normally, the initial reboot may be slower than normal. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application un-installer. For each disable/delete, you will need to restart if you don't do them all at once.
Safe Mode
Safe Mode - About
General information.
Isolating issues in Mac OS X
Step by Step to Fix Your Mac
You also have 90 day telephone support from Apple Support.
Apple Support Contact
Apple Support contact - Telephone

Single Sign on Issue for new Portal Users

We are implementing ESS on EP 6.0. the architecture is like EP 6.0 - ITS - R/3.
and we want to implement the single sign-on. so that when the users login the portal, the Portal Authenticates the user and then portal uses just the Portal UserID and logs in ITS/R3 without verifying the SAP PWD. Portal ID and SAP ID are same.
The single sign on is working fine for those users who already have an SAP ID.
we need to create new R/3 ID's for the new employees. and we don't wanna let the employees login in directly to R/3.
When we create a new ID in R/3 and login for the first time in R/3, it asks to change the password.
since the new employees won't be using R/3 and they login through portal and b'cos we implemented single signon, the portal tries to login in r/3 using the Portal ID/R3 ID, but the SAP R/3 ID is not actived since the user did not change the password, the SSO is failing.
We didn't wanna assign the R/3 ID a password. since it will be an audit issue.
Can anybody give any suggestions, so that the administrator need not assign a password and the users need not login in r/3 and change the pwd for the first time.
Hope you understand my problem, if u need any clarification, let me know..
Thanks.

Hi Gopi-
You can override the password check when a valid logon ticket is presented by setting the profile parameter:
login/pasword_change_for_SSO 0
using RZ10 in the instance profiles. (Requires a restart of R/3)
This overrides the password prompt/check when the user presents a valid logon ticket.
Hope this helps you out.
Thanks,
Marty

Single sign-on on L Series

Hi Support,
I am very unhappy about the missing single sign-on functionality at my L420. If you have a look at the official specification of the Notebook (http://www.lenovo.com/products/us/laptop/thinkpad/l-series/L420/l420_l520_datasheet.pdf) you can read, that this product has a “Fingerprint reader enhanced with features to easily access the system and BIOS”. But the BIOS-functionalities (power-on and hard disc password protection) are missing.
At the Lenovo homepage I found out, that this is not a bug (http://support.lenovo.com/en_EG/downloads/detail.page?DocID=HT062325), but this is not ok. The single sign-on is part of the technical description and has to be implemented.
Regards
Philipp923

I have the same question for an L530 2478-25G BIOS G3ET91WW(2.51): The fingerprint reader works fine to sign into Windows, but Fingerprint Software 5.9.8 Build 7264 does not provide any option to activate the fingerprint reader at power on time.
thanks
Wilfried
L530 2478-25G Win 7 Pro SP1 64-bit; R500 2733-6RG XP SP3; T42p; T30 ... and several other models of IBM TPs in the past since 1996

Need information on Single Sign On

Hi,
Can we have SAP integeration and Business Objects AD SSO authentication work on the same application server.In our environment this same instance has to support SAP users to login also . For that default should be secSAPR3 and Vintela should be false and other SSO enabled as mentioned in document.
But for Single sign on, authentication.default has to be secWinAD,Vintela true.For SAP , authentication.default has to be secSAPR3 We want both of them to work. Is this possible.
OR
Is recommendation from BO to separate out instance for SAP users integrated with BO in one instance and all non sap users in another?
Is there any documentation/steps to configure SSO for XI 3.1?
Please guide!!!
Thanks...

Hi,
not sure if I fully got your scenario but it looks like you have three different authentication mechanisms:
- Win AD
- SAP
- Vintela
An chance to consolidate with a scenario like SNC ?
What are the use cases for the end-user or asked different when would a user use Win AD, SAP, Vintela ?
thanks
ingo

Partner application single sign-on and Oc4j

hello,
I'm trying to test portal's partner application single sign-on, following the examples inside the "Oracle9 iAS Single Sign-On Application Developers Guide":
With Tomcat as jsp engine everything works fine, but with Oc4j when I try to enter the protected jsp page i have this exception:
oracle.security.sso.enabler.SSOEnablerException: java.lang.IllegalStateException: OutputStream already retrieved
     at SSOEnablerBean.getSSOUserInfo(SSOEnablerBean.java:153)
     at SSOEnablerJspBean.getSSOUserInfo(SSOEnablerJspBean.java:57)
     at /protetta.jsp._jspService(/protetta.jsp.java:37) (JSP page line 4)
Any suggestion?
Thanks in advance.

I get the same problem with my partner application. It runs fine on JServer but I get the following problem on oc4j:
oracle.security.sso.enabler.SSOEnablerException: java.lang.IllegalStateException: OutputStream already retrieved
at oracle.br.aerochain.sso.SSOEnablerBean.getSSOUserInfo(SSOEnablerBean.java, Compiled Code)
at oracle.br.aerochain.sso.SSOEnablerJspBean.getSSOUserInfo(SSOEnablerJspBean.java, Compiled Code)
at /jsp/papp.jsp._jspService(/jsp/papp.jsp.java, Compiled Code)
at com.orionserver[Oracle9iAS (9.0.2.0.0) Containers for J2EE].http.OrionHttpJspPage.service(OrionHttpJspPage.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpApplication.serviceJSP(HttpApplication.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.JSPServlet.service(JSPServlet.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java, Compiled Code)     at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].util.ThreadPoolThread.run(ThreadPoolThread.java, Compiled Code)
Did anyone get a solution for this?
TIA

Configuring JCo3 Connection Pool with single sign on on non SAP Java server

Hi Everyone,
i have configured a connection pool on JBoss as per JCo3 Documentation and is working great.
Now I need help to configure this connection pool with single sign on so that RFc on SAP ECC systems are executed using end users credential rather than using single user name password used to configure JCo connection pool.
On SAP Java stack I am sure its possible within Java WebDynpro and i assume using JCA resource adapter. But what if we don't want to use SAP Java App server.
Any help will be appreciated.
Thanks,
Divyakumar Jain

Eason, 你好！
I have exactly the same problem. Did you find a solution to this problem? If so, please let me know!

How to pass credentials/saml token access sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication

How to pass credentials/saml token exchange to the sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication
Identity provider here is Oracle identity provider
harika kakkireni

Hi,
The following materials for your reference:
Consuming List.asmx on a claims based sharepoint site
http://social.technet.microsoft.com/Forums/sharepoint/en-US/f965c1ee-4017-4066-ad0f-a4f56cd0e8da/consuming-listasmx-on-a-claims-based-sharepoint-site?forum=sharepointcustomizationprevious
Sharepoint Claims based authentication and Single Sign on
http://social.technet.microsoft.com/Forums/sharepoint/en-US/2dfc1fdc-abc0-4fad-a414-302f52c1178b/sharepoint-claims-based-authentication-and-single-sign-on?forum=sharepointadminprevious
Sharepoint Claim Based Authentication Web Service issuehttp://social.msdn.microsoft.com/Forums/office/en-US/dd4cc581-863c-439f-938f-948809dd18db/sharepoint-claim-based-authentication-web-service-issue?forum=sharepointgeneralprevious
Best Regards
Dennis Guo
TechNet Community Support

ApEx 2.1.0.00.39 as Partner Application in Oracle AS Single Sign-On

Hi,
I've installed the last Application Express 2.1.0.00.39 (oracle-xe-10.2.0.1-1.0.i386.rpm and oracle-xe-univ-10.2.0.1-1.0.i386.rpm) but, when I try to "create an authentication scheme" for configure an ApEx application to use SSO under
Home>Application Builder>Application xxx>Shared Components>Authentication Schemes>Create Authentication Scheme
in the second step of the procedure I don't find the choice "Oracle Application Server Single Sign-On (Application Express engine as Partner App)".
I found only these:
- Show Built-In Login Page and Use Open Door Credentials
- Show Login Page and Use Application Express Account Credentials
- Show Login Page and Use Database Account Credentials
- Show Login Page and Use LDAP Directory Credentials
- No Authentication (using DAD)
even if under the help voice "V Information" the others two are describes:
Oracle Application Server Single Sign-On (Application Express engine as Partner App) delegates authentication to the Oracle Application Server Single Sign-On (SSO) Server. This Application Express site must have already been registered as a partner application with the SSO server. For more information, contact your administrator.
Oracle Application Server Single Sign-On (My application as Partner App) delegates authentication to the SSO server. In this case, you must register an application with SSO as a partner application. See the next page for more details.
Does Someone know how to resolve it?
Thanks
Emanuele

Thanks for all your help Scott
I've added the -PORTAL_SSO- .....
After this I've had a new problem same to this: Re: SSO Authentication Not Working
"get the error below and it then directs me to http://hostx/htmldb/f? and the "p=" is missing"
But after a lot of tests I discovered where was the problem: "The apache configuration for the proxy!!"
This an extract from the installation doc :
SetEnv force-proxy-request-1.0 1
ProxyPass /htmldb http://127.0.0.1:8080/htmldb
ProxyPassReverse /htmldb http://127.0.0.1:8080/htmldb
ProxyPass /i http://127.0.0.1:8080/i
ProxyPassReverse /i http://127.0.0.1:8080/i
ProxyPass /sys http://127.0.0.1:8080/sys
ProxyPassReverse /sys http://127.0.0.1:8080/sys
where you replace 127.0.0.1 with the name OR ip address of your XE installation. 8080 is the default http port of your XE installation. "
Well, I used the IP ADDRESS and in the @regapp > listener_token the NAME!!! (HTML_DB:servername.domain:80)
I changed the IP ADDRESS with the NAME, restarted the httpd service and now all works fine.
Emanuele

Single Sign on using SAML between JWS application and Web Application

Hi,
We have two applications one is swing based Java Web Start application and other is a normal web application. We are trying to enable single sign on between both the applications. Can SAML be used to enable single sign on? If yes, can some one let us know how to do this?
Thanks,
Rama

Thanks. But it is based on two WEB applications deployed on two different weblogic domains. What I am looking for is one application which is launched using Java Web Start(JNLP) and other a web application. The Java Web Start application uses its proprietary authentication implementation and the web application used DefaultAuthenticator of weblogic. Hope this detail will help you to answer my question better. I should have given this information earlier.
Thanks.
Rama

OBIEE 11G with Single Sign-On and Active Directory

Hi guys,
Release Version: Oracle Business Intelligence 11.1.1.5.0
Patch applied: 11.1.1.5.0 BP3 (Patch 13832750)
OBIEE Server operating system: Windows Server 2008 SP2 (32-bits Operating System).
We are trying to configure Single Sign-On according to TechNote_WNA_SSO_AD_V4.0.doc.
Our krb5login.conf:
com.sun.security.jgss.krb5.initiate {
com.sun.security.auth.module.Krb5LoginModule required
principal="[email protected]"
keyTab=cgdkobi2.keytab
useKeyTab=true
storeKey=true
debug=true
com.sun.security.jgss.krb5.accept {
com.sun.security.auth.module.Krb5LoginModule required
principal="[email protected]"
keyTab=cgdkobi2.keytab
useKeyTab=true
storeKey=true
debug=true
We generate de keytab file:
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.24\bin\ktab.exe -k cgdkobi2.keytab -a [email protected]
Password for [email protected]:XXXXXXX
Done!
Service key for [email protected] is saved in cgdkobi2.keytab
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.2-4\bin\kinit -k -t cgdkobi2.keytab cgdkobi2
New ticket is stored in cache file C:\Users\cgdkobi2\krb5cc_cgdkobi2
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.2-4\bin\klist -k -t cgdkobi2.keytab
Key tab: cgdkobi2.keytab, 1 entry found.
[1] Service principal: [email protected]
KVNO: 1
Time stamp: Mar 15, 2013 10:34
C:\OracleBI11g\user_projects\domains\bifoundation_domain>klist
Current LogonId is 0:0x406163f5
Cached Tickets: (0)
We re-start the services and logon into analytics web and SSO doesn't work but there's not an error. It runs successfully with and Active Directoy user and password. Seems like SSO wasn't enabled, but I checked is enabled.
Any suggestion?
Thanks in advanced

Follow the posts : OBI 11.1.1.6.SSO and You are not currently signed in to Oracle BI Server" for OBIEE 11.1.1.6 SSO do the troubleshooting mentioned there.
Also check your logs for error like the one below:
[2012-03-09T16:42:36.000-05:00] [OBIPS] [NOTIFICATION:1] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: 6c98b5cce1f24814:2a613331:135f95fbdff:-8000-0000000000005b7a,0:1:1] [tid: 5932] Authentication Failure.
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43113] Message returned from OBIS.
[nQSError: 13039] The impersonator does not exist in the BI Security Service. (08004)[[
If you are getting this when you login to OBIEE : You are not currently signed in to Oracle BI Server"
then you need to apply this patch : 13553428 QA:BLK:DELIVER TO CORP. OID LDAP USERS FAILED WITH IMPERSONATOR DOES'NT EXIST. 11.1.1.6.0 Generic Platform (American English) General Oracle BI Suite EE Apr 5, 2012 799.4 KB
Let us know the updates. Hope this helps. Mark if it does.!
Thanks,
SVS

Difference between Federated single sign on and just Single sign on

Can anyone please give a clear definition of what is
1. Federated Single sign on?
2. Just Single Sign on ?
As a security expert if you were to Architect security what will you suggest ?
Lets take an example Landscape
NW1(ABAP + JAVA)- system, NW-2(ABAP+JAVA) system and EP( java only), LDAP
I am having a hard time convincing the customer to have both CONSUMER AND PRODUCER PORTAL for Federated single sign on? is this a bad idea. Customer says just give me SSO(with just one portal acting as CONSUMER/PRODUCER).
initial GOLIVE user load will be 700+ users.
Edited by: Franklin Jayasim on Jul 16, 2010 7:52 PM
Edited by: Franklin Jayasim on Jul 16, 2010 7:53 PM
Edited by: Franklin Jayasim on Jul 16, 2010 7:57 PM
Edited by: Franklin Jayasim on Jul 17, 2010 12:17 AM

Hi Denny Liao
The project is going to have BI(NW) and ECC/SRM/HR(NW) and sepparate portal ( EP - Java only )
I thought that normal SSO will help in the intranetwork, what happens if the employee(user) needs to work from home.
What about the external vendors suppliers etc...?

How to integrate Single Sign-On and JSF?

Hi all,
We are going to develop a web application using Oracle technologies, including ADF and JSF.
But we´ll need to secure our website using Oracle Identity Manager (Single Sign-On). I am having difficulties to find any resource explaining how to do that.
Also, the IM (SSO) will run on a Oracle AS instance and our web app (ADF+JSF) will run on a separete OC4J instance, due to ADF version. Is this a problem?
Thanks

We too are in the process of implementing iStore with SSO features.
And if you believe me it seems to me as nightmare.
In our scenerio we are intgrating this SSO with Third party access control too (AD and Siteminder). I would request you to please respond me on the following mail id , so we can share our experince which will help us in our implementation
[email protected]
regards and thanks in advance
Vikas Deep

OAM 11g Single Sign-On and OAM 11g Cookies

Hi all,
I need to know following,
is it possible to get the username and password from the OAM 11g + IIS Webgate cookies and forward the same to the application for further authentication? is there any way to decrypt the cookie and use the information in the application?
Regards.

Yes , you can get the user password ,but for that you will have to write a custom plugin , else it is not possible.
Refer step number 9 in the blog Single Sign on with Oracle Access Manager: Creating a Custom Authentication Plugin

T440P - Win 8.1 Fingerprint Single Sign on Issue

Similar Messages

Maybe you are looking for