| |
Results |
|
Identifying the SSO token signature hash algorithms
|
To identify the used SHA methods in an SSO token you can use the following URL (after you are logged in to an SBM system that uses SSO): http://<insert machine here>/tmtrack/tmtrack.dll? ALFSSOGatekeeperCommand =ShowSSOToken&TokenEnc=pretty Once the page is loaded right click on the empty space in that page and View Source.
|
|
|
|
How to retrieve your actual SSO token (ALF SSO Authentication Token)
|
Change the URL in the browser as follows: http://<sbm server>/tmtrack/tmtrack.dll? ALFSSOGatekeeperCommand =ShowSSOToken&TokenEnc=xml The resulting page will give a long line that starts something like this:
|
|
|
SBM Version Diff
|
Differences Between Versions input.type = "hidden"; input.name = " ALFSSOGatekeeperCommand "; input.value = "NoDeframe"; @@ -8933,13 +9591,56 @@
|
|
|
|
SBM Version Diff
|
Differences Between Versions // ?sid=&¶m1=value1 // ?shell=&¶m1=value1 // ?sid=&shell=&¶m1=value1 - // ? ALFSSOGatekeeperCommand =ShowSSOToken&TokenEnc=base64-urlencoded"
|
|
|
|
SBM Version Diff
|
Differences Between Versions - var request = top.dll + ' ALFSSOGatekeeperCommand =ShowSSOToken&TokenEnc=base64-urlencoded&TokenCompress=false';
|
|
|
