Enable Single Sign-On (SSO) in TeamCity

Enable Single Sign-On (SSO) in TeamCity

TeamCity can use the Windows Active Directory to authenticate users. To configure TeamCity to automatically log in users who are already logged into the Windows domain enable the Single Sign-On (SSO) functionality.

1. In the upper right corner of the TeamCity web interface select Administration,
   
2. On the left side in the Server Administration section select Authentication,
   
3. Under HTTP authentication modules click the Load preset… button,
   
4. In the drop-down list select Microsoft Windows Domain,
   
5. Click the Edit link of the Microsoft Windows domain,
   
6. Enter the name of the domain in your organization. If you leave the Allow creating new users… checkbox enabled, when new users log into TeamCity they are placed into a default user role. Make sure that role does not give them any authority.
   

Accessing TeamCity using Single Sign-On (SSO)

1. With your web browser navigate to MY_TEAMCITY_SERVER/ntlmLogin.html,
2. If asked, enter your domain username and password once,
   
3. Subsequent logins in the same browser will not require authentication while the browser stays open.