If you enable automatic log in, SmartCard authentication is enforced—the SSO log in page does not appear. This means only users with a valid SmartCard can access Business Mashups.
Using Chrome with Smart Card authentication enabled you don't get prompted for a client certificate after failing to login the first time. If you accidentally choose the wrong client certificate the first time you use the smart card option in Chrome you might not get prompted anymore to choose a different one even after closing Chrome or removing all the browser cache. There are a couple things to try.
SBM is setup to enable login form with a smart card login. Provide the client certificate when logging in, however, ensure that the client certificate does not transform to a valid user. The login form will indicate "invalid username/password".
This document assumes that SSL/TLS has already been enabled on IIS and the SBM Tomcat. It will also work if you SBM Tomcat is installed on a different server from IIS.
This article outlines the procedure to display a Logon Consent Banner or general notice at the bottom of the SBM login screen when SSO is enabled and SBM's authentication settings are configured to utilize the SBM login page. If you're using a CAC/ Smart Card setup that is proxied over IIS, this setup will not work and you'll need to consult article S141333 for an alternate solution.
