Syrius Single Sign On

Newer versions of the Syrius software support a Single Sign On (SSO) feature.

Starting with version 2.6.0, such constellations are also usable with Oryon in an initial implementation.

The distribution includes out-of-the-box support for the default SSO method.

Using Single Sign On

SSO functionality is enabled by providing Java properties to the startup commands of the Oryon step driver, or the Oryon IDE.

The following properties are recognized:

oryon.sso.implementation

Sample usage:

-Doryon.sso.implementation=ch.exense.oryon.modules.syrius.fx.sso.adcubum.AdcubumSSO

The value of this property defines the name of the class which implements the actual SSO login procedure.

Currently, only the abovementioned implementation is bundled with the Oryon distribution, but other implementations can be developed and integrated independently if needed; please contact us for more details or support.

oryon.sso.credentials

Sample usage:

-Doryon.sso.credentials=username:password

The value of this property defines the credentials (username/password) used for the SSO login.

</div>


<div class="admonition-content">

Security Note: This property contains sensitive information, in particular, account information and the corresponding clear-text password. It should only be used in controlled environments where the associated risk has been carefully evaluated and deemed acceptable.

Security considerations

As outlined above, the initial implementation for SSO support partly relies on insecure methods for providing credentials, and should only be used in controlled environments and/or with credentials with limited impact.

We are investigating methods for further improving the security in future versions.