Microsoft Sharepoint Products and Technologies Resource Kit eBook

716 Part VIII: Securing SharePoint Products and Technologies
To disable the single sign-on service, do the following on each front-end Web
server, job server, and any server running the single sign-on service:
1. On the taskbar, click Start, point to Administrative Tools, and then click
Services.
2. On the Services management console, double-click Microsoft Single Sign-on
Service.
3. On the General tab, in the Startup type list, click Manual.
4. In the Service status section, click Stop.
5. Click OK.
Creating a Web Part That Uses Single Sign-On
After you have configured the single sign-on and created the application definitions,
you need to develop a Web Part that implements the single sign-on functionality and
retrieves information from the corresponding back-end application programmatically.
SharePoint Portal Server 2003 provides a programming interface for developers
to use and extend the single sign-on feature. There are two namespaces provided
solely for interaction with the single sign-on functionality, as well as one class in a
more generic Microsoft.SharePoint.Portal namespace, as follows:
■ The Microsoft.SharePoint.Portal.SingleSignOn namespace contains core classes
that allow you to work with account credentials and application definitions in the
single sign-on credentials store. These core classes and their functionality are listed
in Table 26-1. The required assembly is Microsoft.SharePoint.Portal.SingleSignon,
located in Microsoft.SharePoint.Portal.SingleSignon.dll.
■ The Microsoft.SharePoint.Portal.SingleSignOn.Security namespace contains two
classes that control the ability to access Single Sign-On resources programmatically
from the code. These two classes and their functionality are listed in Table 26-2.
The required assembly is Microsoft.SharePoint.Portal.SingleSignOn.Security,
located in Microsoft.SharePoint.Portal.SingleSignOn.Security.dll.
■ The SingleSignonLocator class in the Microsoft.SharePoint.Portal namespace
allows you to locate a URL for the logon form for the SSOSrv service. It has the
GetCredentialEntryUrl(strAppName, [port]) method that returns the URL for the
logon form for a given application definition. The method takes two parameters:
strAppName, which is a name of an application that is configured in the
corresponding application definition, and the optional port number for SSL. If
you do not specify the port number, and SSL is not enabled on the server, the
port number will default to port 80 (that is, the port value will be omitted from
the URL). If the second parameter is absent and SSL is enabled on the server,
the port number is assumed to be the standard SSL port 443. However, if you
require the URL returned to be formatted for SSL on a particular port, you need