Some more points to my working configuration of Single Sign-On in Lotus Notes.
Automating configuration with plugin_customization.ini
I do a lot of software tests with my productive Notes Client (on Mac OS), so i often delete the Expeditor-folder in ~/Library/Application Support/Lotus Notes Data/. So i place configuration details in /Applications/Notes.app/Contents/MacOS/rcp/plugin_customization.ini, then the settings get automatically applied.
# Connections Config
com.ibm.lconn.client.base/server=http\://connections.example.com/profiles
com.ibm.lconn.client.base/authtype=DOMINO-SSO
com.ibm.lconn.client.base/dominosso.dominoresolveservername=false
com.ibm.lconn.client.base/authserver=$hierarchical Domino-Server-Name$
com.ibm.lconn.client.base/dominosso.useclustermates=true
com.ibm.lconn.client.base/dominosso.preferred.username.field=ShortName
com.ibm.lconn.client.base/policy-mode=OVERWRITE
com.ibm.lconn.client.base/enableConnectionsIntegration=true
# Sametime Config
com.ibm.collaboration.realtime.community/name=$Name for Community$
com.ibm.collaboration.realtime.community/host=$Hostname of Sametime Server$
com.ibm.collaboration.realtime.community/defaultAuthType=ST-DOMINO-SSO
com.ibm.collaboration.realtime.community/authServerUrl=$hierarchical Domino Server Name$
com.ibm.collaboration.realtime.community/loginByToken=true
com.ibm.collaboration.realtime.community/tokenLoginOnly=true
com.ibm.collaboration.realtime.community/loginAtStartup=true
com.ibm.collaboration.realtime.login/autologin=true
com.ibm.collaboration.realtime.login/alwaysLoggedIn=true
com.ibm.collaboration.realtime.imhub/disableExit=false
# Status Updater Fix to show profile pictures
com.ibm.lconn.statusupdates/download.image.enabled=true
Sametime will only apply the settings of plugin_customization.ini, when following file is not present!
~/Library/Application Support/Lotus Notes Data/Expeditor/Applications/.metadata/.plugins/com.ibm.collaboration.realtime.login/CANONICAL_NAME.xml
Applying these settings through a Desktop setting document and policy
You can apply this through a policy too, you have to add the values to a Desktop settings document. Syntax is described here: IBM KB 21407709 .
There is a bug in the desktop settings document until Notes / Domino 8.5.3, you can’t delete the entries.
Details:
Comments on Detlef Poettgen tells, that error is still active in 8.5.2 FP3, i tested 8.5.3 and it works.
Please be aware, that Domino Directory allows stored forms and if you want to delete Managed Settings of an Desktop settings document which is created before 8.5.3, the error still occurs.
Path in Windows Installations
Expeditorfolder is
NotesData
Path to plugin_customization.ini:
NotesProgram