Due to the restriction to apply SAML or similar authentication methods in the normal way on non-web based applications the MSP Add-In is not currently supported on instances with Single-Sign-On enabled.
Please consider implementing a solution to allow the use of the MSP Add-In on Single-Sign-On instances.
The Security Assertion Markup Language (SAML) is the dominant standard for cross-domain web single sign-on in use today and is what PPO uses to implement Single-Sign-On. However, its use is constrained to web browsers accessing web based applications such as PPO, since it relies on a mechanism of redirects to allow the user to authenticate against the Identity Provider.
The SAML standard also does not enforce any particular authentication mechanism, so the Identity Provider is free to implement any of a variety of mechanisms such as forms based authentication, Windows integrated security or token based authentication.
What this means is that it is not possible for a non-web based application such as the MSP Add-In to implement SAML authentication in the normal way and therefore the add-in currently does not work on PPO instances that use Single-Sign-On.
The industry has recognised this problem and various efforts are currently under way to allow SAML to work seamlessly on all platforms. Some possible solutions include using a combination of OAuth and SAML as well as using SAML back-channel communication. We are carefully watching progress in this area and will consider implementing a solution for the add-in as soon as we believe that a workable solution is available.
We currently have large project which is planned in quite a detailed level. We use single sign on and use MSP to drive the master plan. Without being able to synchronise progress on tasks in PPO to MSP is creating quite a headache for us as we need to use a work around with tasks reports to update progress in MSP so that all progress info is not lost when the MSP plan is uploaded back into PPO. Would appreciate a solution or this.
Hi Abri,
Thank you for the feedback. Much appreciated. We will keep this in mind.
