==========================
Configuring single sign-on
==========================

AEN's single sign-on (SSO) capability creates a new authentication provider
that defers to your Anaconda Repository for login and authentication cookies.

To enable SSO:

#. Deploy AEN and Repository on the same machine.

#. In the ``/opt/wakari/wakari-server/etc/wakari/config.json`` file, add:

   .. code-block:: bash

      {
      EXISTING_CONFIGURATION,
      "SECRET_KEY": "<repo signing secret>",
      "REPO_LOGIN_URL":
         "http://example_repo.com:8080/account/login?next=http://example_repo.com/"
      }

#. Copy the ``SECRET_KEY`` from the Repository configuration file.

#. In the ``/opt/wakari/wakari-server/etc/wakari/wk-server-config.json`` file, modify:

   .. code-block:: bash

      {
      EXISTING_CONFIGURATION,
      "accounts": "wk_server.plugins.accounts.repo",
      }

#. To activate the changes restart ``wakari-server``::

      sudo service wakari-server restart

SSO is enabled.
