- enable Single Sign-On - in Security > Secure SSO > SSO URL Overrides override the Federation Server URL to https://hostname: 8243 /idp/ login - Apply the change
You are then redirected to the equivalent of this url. http://<sbmserver>:8085/ALFSSOLogin/login ? So without the 8085 or 8243 ports allowed through the firewall you can't get to the login screen.