{"id":11454,"date":"2025-01-12T14:00:44","date_gmt":"2025-01-12T05:00:44","guid":{"rendered":"https:\/\/chat-messenger.com\/?p=11454"},"modified":"2026-08-04T01:04:02","modified_gmt":"2026-08-03T16:04:02","slug":"toi-dang-o-day","status":"publish","type":"post","link":"https:\/\/chat-messenger.com\/vi\/manual\/camserver\/iis-sso","title":{"rendered":"\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) s\u1eed d\u1ee5ng x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p trong IIS."},"content":{"rendered":"<p class=\"is-style-icon_info wp-block-paragraph\">Vui l\u00f2ng s\u1eed d\u1ee5ng c\u00e1c l\u1ec7nh sau trong m\u00f4i tr\u01b0\u1eddng v\u1eeba \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t.<\/p>\n\n\n<div class=\"swell-block-postLink\">\t\t\t<div class=\"p-blogCard -external\" data-type=\"type3\" data-onclick=\"clickLink\">\n\t\t\t\t<div class=\"p-blogCard__inner\">\n\t\t\t\t\t<span class=\"p-blogCard__caption\">H\u1ed9i ngh\u1ecb tr\u1ef1c tuy\u1ebfn, tr\u00f2 chuy\u1ec7n &amp; nh\u1eafn tin<\/span>\n\t\t\t\t\t<div class=\"p-blogCard__thumb c-postThumb\"><figure class=\"c-postThumb__figure\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2021\/05\/cam_slide_ja_hojo.png\" alt=\"\" class=\"c-postThumb__img u-obf-cover\" width=\"320\" height=\"180\"><\/figure><\/div>\t\t\t\t\t<div class=\"p-blogCard__body\">\n\t\t\t\t\t\t<a class=\"p-blogCard__title\" href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/may-chu-camera\/xac-thuc-windows\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) t\u00edch h\u1ee3p x\u00e1c th\u1ef1c Windows | H\u1ed9i ngh\u1ecb tr\u1ef1c tuy\u1ebfn Chat &amp; Messenger<\/a>\n\t\t\t\t\t\t<span class=\"p-blogCard__excerpt\">T\u1ed5ng quan: Trong m\u00f4i tr\u01b0\u1eddng Active Directory, vi\u1ec7c s\u1eed d\u1ee5ng X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p (Kerberos) cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp Windows hi\u1ec7n c\u00f3 c\u1ee7a h\u1ecd \u0111\u1ec3 truy c\u1eadp v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng C&amp;M (Ch\u1ec9 huy &amp; Qu\u1ea3n l\u00fd), lo\u1ea1i b\u1ecf nhu c\u1ea7u v\u1ec1 th\u00f4ng tin \u0111\u0103ng nh\u1eadp b\u1ed5 sung\u2026<\/span>\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\n<h2 class=\"wp-block-heading\">T\u1ed5ng quan v\u1ec1 x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p (IWA) l\u00e0 m\u1ed9t c\u01a1 ch\u1ebf t\u1ef1 \u0111\u1ed9ng cung c\u1ea5p th\u00f4ng tin x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng cho IIS khi c\u1ea3 IIS v\u00e0 ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec1u \u0111\u0103ng nh\u1eadp v\u00e0o c\u00f9ng m\u1ed9t mi\u1ec1n. Khi b\u1ea1n t\u1ea1o m\u1ed9t trang web b\u1eb1ng C# c\u1ee7a ASP.NET, b\u1ea1n c\u00f3 th\u1ec3 x\u00e1c \u0111\u1ecbnh xem ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c hay ch\u01b0a v\u00e0 truy xu\u1ea5t th\u00f4ng tin v\u1ec1 nh\u1eefng ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec1u n\u00e0y cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp c\u00e1c \u1ee9ng d\u1ee5ng web \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef (ho\u1eb7c t\u00edch h\u1ee3p v\u1edbi) IIS m\u00e0 kh\u00f4ng c\u1ea7n th\u1ef1c hi\u1ec7n th\u00eam c\u00e1c b\u01b0\u1edbc \u0111\u0103ng nh\u1eadp, \u0111\u1ed3ng th\u1eddi cho ph\u00e9p t\u00edch h\u1ee3p SSO v\u1edbi c\u00e1c m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng kh\u00e1c. <\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">*N\u1ebfu ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng tham gia c\u00f9ng m\u1ed9t mi\u1ec1n ho\u1eb7c ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c, trang IIS s\u1ebd hi\u1ec3n th\u1ecb bi\u1ec3u t\u01b0\u1ee3ng \u0111\u0103ng nh\u1eadp, v\u00e0 n\u1ebfu qu\u00e1 tr\u00ecnh x\u00e1c th\u1ef1c kh\u00f4ng th\u00e0nh c\u00f4ng, l\u1ed7i HTTP 401.1 \u2013 Kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00e9p truy c\u1eadp s\u1ebd x\u1ea3y ra.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1849\" height=\"781\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image.png\" alt=\"\" class=\"wp-image-11455\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Quy tr\u00ecnh SSO (\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00f3i Chat&amp;Messenger Ultimate c\u00e0i \u0111\u1eb7t t\u1ea1i ch\u1ed7 cho ph\u00e9p \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) th\u00f4ng qua x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p. Quy tr\u00ecnh SSO nh\u01b0 sau:<\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<ol class=\"wp-block-list\"><li>Tr\u01b0\u1edbc ti\u00ean, m\u00e1y kh\u00e1ch truy c\u1eadp trang x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p \/cam-iissso.<\/li><li>Trang \/cam-iissso s\u1eed d\u1ee5ng ASP.NET \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh xem ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c hay ch\u01b0a, sau \u0111\u00f3 k\u1ebft n\u1ed1i v\u1edbi CAMServer.<\/li><li>CAMServer th\u1ef1c hi\u1ec7n t\u00ecm ki\u1ebfm LDAP \u0111\u1ec3 x\u00e1c minh ng\u01b0\u1eddi d\u00f9ng l\u00e0 ng\u01b0\u1eddi d\u00f9ng AD h\u1ee3p l\u1ec7, t\u1ea1o URL \u0111\u1ec3 truy c\u1eadp CAMServer c\u00f9ng v\u1edbi ssoToken (m\u1ed9t gi\u00e1 tr\u1ecb ng\u1eabu nhi\u00ean duy nh\u1ea5t c\u00f3 \u0111\u1ed9 d\u00e0i t\u1eeb 30 byte tr\u1edf l\u00ean), v\u00e0 sau \u0111\u00f3 y\u00eau c\u1ea7u chuy\u1ec3n h\u01b0\u1edbng.<\/li><li>Truy c\u1eadp CAMServer v\u00e0 x\u00e1c th\u1ef1c b\u1eb1ng ssoToken. Sau khi x\u00e1c th\u1ef1c th\u00e0nh c\u00f4ng, m\u1ed9t ID phi\u00ean \u0111\u1ec3 truy c\u1eadp API s\u1ebd \u0111\u01b0\u1ee3c c\u1ea5p.<\/li><\/ol>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1377\" height=\"1246\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-19.png\" alt=\"\" class=\"wp-image-11532\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\">ID ng\u01b0\u1eddi d\u00f9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng SSO ph\u1ea3i kh\u1edbp v\u1edbi UserPrincipalName trong Active Directory v\u00e0 ph\u1ea3i \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd tr\u01b0\u1edbc \u0111\u00f3 trong Chat&amp;Messenger. UserPrincipalName l\u00e0 <a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/may-chu-camera\/thu-muc-hoat-dong-ldap\/#Get-ADUser\">T\u00f4i mu\u1ed1n l\u1ea5y danh s\u00e1ch ng\u01b0\u1eddi d\u00f9ng Active Directory v\u00e0 t\u1ea1o m\u1ed9t t\u1ec7p CSV.<\/a> Vui l\u00f2ng tham kh\u1ea3o th\u00eam th\u00f4ng tin n\u00e0y.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">C\u00e1c y\u00eau c\u1ea7u \u0111\u1ec3 tri\u1ec3n khai SSO<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">K\u1ebft n\u1ed1i Windows Server v\u1edbi mi\u1ec1n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vui l\u00f2ng k\u1ebft n\u1ed1i m\u00e1y ch\u1ee7 Windows Server \u0111ang ch\u1ea1y CAMServer\/IIS v\u1edbi mi\u1ec1n Active Directory.<\/p>\n\n\n\n<p class=\"is-style-crease wp-block-paragraph\">\u0110\u1ec3 ki\u1ec3m tra xem m\u00e1y ch\u1ee7 Windows hi\u1ec7n t\u1ea1i \u0111ang tham gia v\u00e0o nh\u1eefng mi\u1ec1n n\u00e0o, h\u00e3y v\u00e0o &quot;Tr\u00ecnh qu\u1ea3n l\u00fd m\u00e1y ch\u1ee7&quot;, nh\u1ea5p v\u00e0o &quot;M\u00e1y ch\u1ee7 c\u1ee5c b\u1ed9&quot; trong menu b\u00ean tr\u00e1i, nh\u1ea5p v\u00e0o &quot;T\u00ean m\u00e1y t\u00ednh&quot; v\u00e0 tham kh\u1ea3o tr\u01b0\u1eddng mi\u1ec1n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ngo\u00e0i ra, IIS n\u00ean \u0111\u01b0\u1ee3c \u0111\u1eb7t tr\u00ean c\u00f9ng m\u1ed9t m\u00e1y ch\u1ee7 v\u1edbi CAMServer v\u00e0 ch\u1ea1y tr\u00ean c\u1ed5ng 80. N\u1ebfu b\u1ea1n \u0111\u1eb7t m\u1ed9t LoadBalancer ph\u00eda tr\u01b0\u1edbc CAMServer, CAMServer s\u1ebd ch\u1ea1y tr\u00ean c\u1ed5ng 8080, do \u0111\u00f3 IIS c\u0169ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng c\u1ed5ng 443.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e0i \u0111\u1eb7t IIS<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">C\u00e0i \u0111\u1eb7t IIS t\u1eeb c\u00e1c vai tr\u00f2 m\u00e1y ch\u1ee7. Khi c\u00e0i \u0111\u1eb7t IIS, h\u00e3y ch\u1ecdn c\u00e1c t\u00f9y ch\u1ecdn sau trong ph\u1ea7n l\u1ef1a ch\u1ecdn d\u1ecbch v\u1ee5 vai tr\u00f2.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>X\u00e1c th\u1ef1c Windows<\/li><li>B\u1ed9 l\u1ecdc ISAPI<\/li><li>Ti\u1ec7n \u00edch m\u1edf r\u1ed9ng ISAPI<\/li><\/ul>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-xs\">B\u1ed9 l\u1ecdc ISAPI: H\u1ed7 tr\u1ee3 t\u1ea3i c\u00e1c m\u00f4-\u0111un m\u1edf r\u1ed9ng trong IIS. C\u1ea7n thi\u1ebft \u0111\u1ec3 t\u1ea3i AspNetCoreModuleV2.<br><br>Ti\u1ec7n \u00edch m\u1edf r\u1ed9ng ISAPI: Th\u00eam ti\u1ec7n \u00edch m\u1edf r\u1ed9ng ISAPI v\u00e0o IIS. \u0110i\u1ec1u n\u00e0y l\u00e0 c\u1ea7n thi\u1ebft \u0111\u1ec3 AspNetCoreModuleV2 ho\u1ea1t \u0111\u1ed9ng. <\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1399\" height=\"849\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/03\/image-5.png\" alt=\"\" class=\"wp-image-11669\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e0i \u0111\u1eb7t g\u00f3i l\u01b0u tr\u1eef ASP.NET Core.<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/dotnet.microsoft.com\/ja-jp\/download\/dotnet\/10.0\">G\u00f3i l\u01b0u tr\u1eef ASP.NET Core<\/a> Vui l\u00f2ng c\u00e0i \u0111\u1eb7t. Sau khi c\u00e0i \u0111\u1eb7t, kh\u1edfi \u0111\u1ed9ng l\u1ea1i IIS v\u00e0 ki\u1ec3m tra xem AspNetCoreModuleV2 c\u00f3 t\u1ed3n t\u1ea1i trong c\u00e1c \u00e1nh x\u1ea1 tr\u00ecnh x\u1eed l\u00fd hay kh\u00f4ng.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-xs\">\u0110\u1ec3 tri\u1ec3n khai \u1ee9ng d\u1ee5ng ASP.NET Core trong m\u00f4i tr\u01b0\u1eddng IIS, ch\u1ec9 c\u1ea7n c\u00e0i \u0111\u1eb7t ASP.NET Core Hosting Bundle.<\/span><\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-xs\">T\u01b0\u01a1ng t\u1ef1, khi n\u00e2ng c\u1ea5p m\u00f4i tr\u01b0\u1eddng ch\u1ea1y ASP.NET Core, ch\u1ec9 c\u1ea7n t\u1ea3i xu\u1ed1ng v\u00e0 c\u00e0i \u0111\u1eb7t G\u00f3i l\u01b0u tr\u1eef (Hosting Bundle).<\/span><span class=\"swl-fz u-fz-xs\">B\u1ea1n c\u00f3 th\u1ec3 ki\u1ec3m tra xem m\u00ecnh \u0111ang s\u1eed d\u1ee5ng m\u00f4i tr\u01b0\u1eddng ch\u1ea1y ASP.NET Core n\u00e0o b\u1eb1ng l\u1ec7nh sau:<\/span><br><span class=\"swl-fz u-fz-xs\">dotnet \u2013list-runtimes<\/span><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1314\" height=\"797\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/08\/image.png\" alt=\"\" class=\"wp-image-13096\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"986\" height=\"206\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-4.png\" alt=\"\" class=\"wp-image-11459\"\/><figcaption>Kh\u1edfi \u0111\u1ed9ng l\u1ea1i IIS<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"965\" height=\"310\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-5.png\" alt=\"\" class=\"wp-image-11460\"\/><figcaption>\u00c1nh x\u1ea1 tr\u00ecnh x\u1eed l\u00fd<\/figcaption><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Th\u00eam \u1ee9ng d\u1ee5ng (cam-iissso)<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\"> Vui l\u00f2ng th\u00eam \u1ee9ng d\u1ee5ng cam-iissso v\u00e0o Trang web m\u1eb7c \u0111\u1ecbnh c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Bi\u1ec7t danh: cam-iissso <\/li><li>\u0110\u01b0\u1eddng \u0111i v\u1eadt l\u00fd: \\sys\\cam-iissso-net8.0<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ngo\u00e0i ra, h\u00e3y c\u1ea5p cho nh\u00f3m IIS_IUSRS quy\u1ec1n truy c\u1eadp ch\u1ec9 \u0111\u1ecdc (\u0111\u1ecdc v\u00e0 th\u1ef1c thi, li\u1ec7t k\u00ea n\u1ed9i dung th\u01b0 m\u1ee5c, \u0111\u1ecdc) \u0111\u1ed1i v\u1edbi th\u01b0 m\u1ee5c cam-iissso-net8.0.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"685\" height=\"441\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-18.png\" alt=\"\" class=\"wp-image-11528\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1012\" height=\"588\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-16.png\" alt=\"\" class=\"wp-image-11521\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">B\u1eadt x\u00e1c th\u1ef1c Windows<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">Nh\u1ea5p chu\u1ed9t ph\u1ea3i v\u00e0o &quot;X\u00e1c th\u1ef1c Windows&quot; v\u00e0 ch\u1ecdn &quot;B\u1eadt&quot;.<\/p>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\"> N\u1ebfu t\u00ednh n\u0103ng &quot;X\u00e1c th\u1ef1c \u1ea9n danh&quot; \u0111\u01b0\u1ee3c b\u1eadt, vui l\u00f2ng t\u1eaft n\u00f3 \u0111i.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"944\" height=\"360\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-8.png\" alt=\"\" class=\"wp-image-11463\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"internet-options-settings\">C\u00e0i \u0111\u1eb7t T\u00f9y ch\u1ecdn Internet<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<h4 class=\"wp-block-heading\">Th\u00eam m\u1ed9t trang web do IIS cung c\u1ea5p v\u00e0o v\u00f9ng intranet. <\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ecdn T\u00f9y ch\u1ecdn Internet, nh\u1ea5p v\u00e0o tab B\u1ea3o m\u1eadt, r\u1ed3i ch\u1ecdn M\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee5c b\u1ed9. Nh\u1ea5p v\u00e0o n\u00fat Trang web, ch\u1ecdn N\u00e2ng cao, v\u00e0 th\u00eam URL c\u1ee7a trang web.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">X\u00e1c minh \u0111\u0103ng nh\u1eadp t\u1ef1 \u0111\u1ed9ng. <\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1ea5p v\u00e0o &quot;T\u00f9y ch\u1ec9nh c\u1ea5p \u0111\u1ed9&quot;, sau \u0111\u00f3 trong ph\u1ea7n &quot;X\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng&quot; \u2192 &quot;\u0110\u0103ng nh\u1eadp&quot;, h\u00e3y \u0111\u1ea3m b\u1ea3o r\u1eb1ng t\u00f9y ch\u1ecdn &quot;T\u1ef1 \u0111\u1ed9ng \u0111\u0103ng nh\u1eadp v\u00e0o v\u00f9ng m\u1ea1ng n\u1ed9i b\u1ed9&quot; \u0111\u01b0\u1ee3c ch\u1ecdn.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-s\">Thi\u1ebft l\u1eadp n\u00e0y l\u00e0 b\u1eaft bu\u1ed9c \u0111\u1ed1i v\u1edbi t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i c\u1ee7a ng\u01b0\u1eddi d\u00f9ng C&amp;M, nh\u01b0ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd t\u1eadp trung b\u1eb1ng B\u1ea3ng \u0111i\u1ec1u khi\u1ec3n qu\u1ea3n l\u00fd ch\u00ednh s\u00e1ch nh\u00f3m.<\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1290\" height=\"994\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-9.png\" alt=\"\" class=\"wp-image-11464\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"619\" height=\"774\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-10.png\" alt=\"\" class=\"wp-image-11465\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e0i \u0111\u1eb7t LDAP<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n mu\u1ed1n th\u1ef1c hi\u1ec7n \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (single sign-on) b\u1eb1ng IIS,<a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/may-chu-camera\/thu-muc-hoat-dong-ldap\/#LDAP-config\" target=\"_blank\" rel=\"noreferrer noopener\">C\u00e0i \u0111\u1eb7t LDAP<\/a>(C\u1ea7n c\u00f3 LDAPUrl, LDAPBaseDN v\u00e0 ng\u01b0\u1eddi d\u00f9ng AD th\u1ef1c hi\u1ec7n x\u00e1c th\u1ef1c proxy.) <\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1449\" height=\"951\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-12.png\" alt=\"\" class=\"wp-image-11492\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"fqdn-spn\">\u0110\u0103ng k\u00fd truy c\u1eadp v\u00e0 SPN b\u1eb1ng FQDN (T\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n).<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c truy c\u1eadp trang X\u00e1c th\u1ef1c T\u00edch h\u1ee3p Windows c\u1ee7a IIS b\u1eb1ng t\u00ean m\u00e1y ch\u1ee7 (t\u00ean NetBIOS) kh\u00f4ng y\u00eau c\u1ea7u \u0111\u0103ng k\u00fd, nh\u01b0ng vi\u1ec7c \u0111\u0103ng k\u00fd SPN l\u00e0 c\u1ea7n thi\u1ebft khi truy c\u1eadp b\u1eb1ng FQDN (T\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n, v\u00ed d\u1ee5: sso.example.com).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00ean ch\u00ednh c\u1ee7a d\u1ecbch v\u1ee5 (SPN) l\u00e0 t\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong x\u00e1c th\u1ef1c Kerberos \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh duy nh\u1ea5t m\u1ed9t d\u1ecbch v\u1ee5 c\u1ee5 th\u1ec3 tr\u00ean Active Directory. Khi truy c\u1eadp m\u1ed9t d\u1ecbch v\u1ee5 b\u1eb1ng T\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n (FQDN) c\u1ee7a n\u00f3, vi\u1ec7c \u0111\u0103ng k\u00fd SPN cho ph\u00e9p m\u00e1y kh\u00e1ch y\u00eau c\u1ea7u ch\u00ednh x\u00e1c v\u00e9 Kerberos cho d\u1ecbch v\u1ee5 m\u00e0 n\u00f3 \u0111ang truy c\u1eadp.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5 <code>https:\/\/sso.example.com<\/code> Khi truy c\u1eadp m\u1ed9t d\u1ecbch v\u1ee5, m\u00e1y kh\u00e1ch (tr\u00ecnh duy\u1ec7t) y\u00eau c\u1ea7u m\u1ed9t v\u00e9 x\u00e1c th\u1ef1c t\u1eeb Active Directory v\u1edbi n\u1ed9i dung: &quot;T\u00f4i mu\u1ed1n k\u1ebft n\u1ed1i v\u1edbi d\u1ecbch v\u1ee5 c\u00f3 t\u00ean HTTP\/sso.example.com.&quot; Active Directory ki\u1ec3m tra xem SPN \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi t\u00e0i kho\u1ea3n n\u00e0o v\u00e0 c\u1ea5p v\u00e9 d\u1ecbch v\u1ee5 t\u01b0\u01a1ng \u1ee9ng. N\u1ebfu SPN kh\u00f4ng \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd ch\u00ednh x\u00e1c, qu\u00e1 tr\u00ecnh x\u00e1c th\u1ef1c Kerberos s\u1ebd th\u1ea5t b\u1ea1i, d\u1eabn \u0111\u1ebfn vi\u1ec7c hi\u1ec3n th\u1ecb h\u1ed9p tho\u1ea1i x\u00e1c th\u1ef1c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c \u0111\u0103ng k\u00fd SPN \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n cho t\u00e0i kho\u1ea3n m\u00e1y t\u00ednh l\u01b0u tr\u1eef IIS. V\u00ed d\u1ee5:<code>qu\u1ea3ng c\u00e1o<\/code> \u0110\u1ed1i v\u1edbi IIS \u0111ang ch\u1ea1y d\u01b0\u1edbi t\u00ean m\u00e1y ch\u1ee7 [hostname], h\u00e3y \u0111\u0103ng k\u00fd SPN nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>setspn -S HTTP\/sso.example.com ad$<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi \u0111\u0103ng k\u00fd, b\u1ea1n c\u00f3 th\u1ec3 ki\u1ec3m tra b\u1eb1ng l\u1ec7nh sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>setspn -L ad$<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">K\u1ebft qu\u1ea3 n\u00e0y <code>HTTP\/sso.example.com<\/code> N\u1ebfu th\u00f4ng b\u00e1o n\u00e0y hi\u1ec3n th\u1ecb, vi\u1ec7c \u0111\u0103ng k\u00fd SPN c\u1ee7a b\u1ea1n \u0111\u00e3 th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Kh\u00f4ng kh\u1ea3 d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng k\u1ebft n\u1ed1i proxy HTTP.<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vui l\u00f2ng l\u01b0u \u00fd r\u1eb1ng SSO kh\u00f4ng kh\u1ea3 d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng k\u1ebft n\u1ed1i proxy HTTP.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">C\u1ea5u h\u00ecnh m\u00f4i tr\u01b0\u1eddng LoadBalancer + SSL<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n \u0111ang s\u1eed d\u1ee5ng X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p IIS trong m\u00f4i tr\u01b0\u1eddng LoadBalancer + SSL, vui l\u00f2ng tham kh\u1ea3o b\u00e0i \u0111\u0103ng tr\u00ean blog sau.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-web\u4f1a\u8b70\u306e-chat-amp-messenger wp-block-embed-web\u4f1a\u8b70\u306e-chat-amp-messenger\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/chat-messenger.com\/blog\/windowsauthentication-loadbalancer-ssl\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-web\u4f1a\u8b70\u306e-chat-amp-messenger wp-block-embed-web\u4f1a\u8b70\u306e-chat-amp-messenger\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/chat-messenger.com\/blog\/windowsauthentication-setspn\n<\/div><\/figure>","protected":false},"excerpt":{"rendered":"<p>\u65b0\u3057\u304f\u5c0e\u5165\u3059\u308b\u74b0\u5883\u3067\u306f\u4ee5\u4e0b\u3092\u3054\u5229\u7528\u304f\u3060\u3055\u3044\u3002 \u7d71\u5408Windows\u8a8d\u8a3c\u306e\u6982\u8981 \u7d71\u5408Windows\u8a8d\u8a3c\uff08Integ [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[17],"tags":[],"class_list":["post-11454","post","type-post","status-publish","format-standard","hentry","category-camserver"],"_links":{"self":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/comments?post=11454"}],"version-history":[{"count":9,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454\/revisions"}],"predecessor-version":[{"id":13097,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454\/revisions\/13097"}],"wp:attachment":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/media?parent=11454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/categories?post=11454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/tags?post=11454"}],"curies":[{"name":"trang web","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}