Windows Authentication

Owned by Heather Geyer
Aug 08, 2022
1 min read

Voyager's Windows Authentication enables you to integrate Voyager into a Windows domain environment, providing a better search experience for your users.

Notes

While it is possible to login using only Windows credentials, we recommend that you leave internal authentication enabled with just the Admin user (make sure you change the default password).

Single Sign-On

Voyager supports NTLM and Negotiate Single Sign-On methods. 

Follow these steps to set up Single Sign-On using NTLM:

  1. On the Single Sign-On tab, check NTLM.

  2. Restart Voyager 

Follow these steps to set up Single Sign-On using Negotiate:

  1. Run the following command to register the Service Principal Name (SPN) for the Voyager server: setspn -A HTTP/machine:port usernam where machine:port is the machine and port the Voyager service is running on and username is the Voyager service account. 

  2. On the Single Sign-On tab, check Enable Negotiate. Click the SPN tab to test the configuration. You should see the Voyager server name under RegisteredServicePrincipalNames. 

  3. If the Voyager server name does not appear under RegisteredServicePrincipalNames or the SPN tab shows an error:

    • Verify that Voyager is running as a service, and that the service account is on the same domain on the machine.

    • Re-run setspn \-A HTTP/machine:port username.

    • Check the SPN tab again. If the Voyager server name is still not present, check Enable NTLM.

  4. Restart Voyager