> Source: [sk110415](https://support.checkpoint.com/results/sk/sk110415)

# sk110415 - SSO configuration not being enforced on a web application (Single Sign ON)

| Property | Value |
|----------|-------|
| Solution ID | sk110415 |
| Date Created | 2016-03-07 |
| Last Modified | 2023-06-19 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- * SSO configuration is not being implemented on a specific web application. The user is being prompted to provide credentials, even though it was configured to reuse the Mobile Access portal's credentials.
* In $CVPNDIR/log/httpd.log users see the following :

  ```
  [SSOWEBFORMS] [CVPN_INFO] Cvpn::SSOWebFormsHandler::isRequestRelevantForSSO: SSO is disabled for this application, request is irrelevant
  ```

* If multiple Web Applications are configured, only some users are prompted while other are not.
* Web Application is set to use Single Sign On Method. Advanced: This Application reuses the portal credentials.

## Cause

There is another Web application with a different SSO configuration that uses the same authorized location as the affected web application.

The gateway cannot differentiate between the Web applications, as they are using the same authorized location. Consequently, the gateway used the SSO configuration of the other Web application.

The error message in *$CVPNDIR/log/httpd.log*is being generated by the Web Form SSO Handler:

1. Another application with the same authorized location was configured and triggered the error message above .
2. While checking the "duplicate" application SSO settings - you can see that the SSO is actually on.
3. The fact that the error was generated by Web Form SSO is that the SSO was actually on , but the Web Form SSO was disabled.

<br />

**Scenario #2** There is another Web Application with "\*" configured under the DNS names settings.  
Any users that is allowed access to this web application is having that Application password saved for all other Web Applications.  

![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110415/Capture20200413083203.png)

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content