{"id":11454,"date":"2025-01-12T14:00:44","date_gmt":"2025-01-12T05:00:44","guid":{"rendered":"https:\/\/chat-messenger.com\/?p=11454"},"modified":"2026-03-12T10:42:36","modified_gmt":"2026-03-12T01:42:36","slug":"iis-sso","status":"publish","type":"post","link":"https:\/\/chat-messenger.com\/vi\/thu-cong\/camserver\/toi-dang-o-day","title":{"rendered":"SSO s\u1eed d\u1ee5ng X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p IIS"},"content":{"rendered":"<p class=\"is-style-icon_info\">\u65b0\u3057\u304f\u5c0e\u5165\u3059\u308b\u74b0\u5883\u3067\u306f\u4ee5\u4e0b\u3092\u3054\u5229\u7528\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n<div class=\"swell-block-postLink\">\t\t\t<div class=\"p-blogCard -external\" data-type=\"type3\" data-onclick=\"clickLink\">\n\t\t\t\t<div class=\"p-blogCard__inner\">\n\t\t\t\t\t<span class=\"p-blogCard__caption\">H\u1ed9i th\u1ea3o tr\u00ean web Tr\u00f2 chuy\u1ec7n &amp; Messenger<\/span>\n\t\t\t\t\t<div class=\"p-blogCard__thumb c-postThumb\"><figure class=\"c-postThumb__figure\"><img src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2021\/05\/cam_slide_ja_hojo.png\" alt=\"\" class=\"c-postThumb__img u-obf-cover\" width=\"320\" height=\"180\"><\/figure><\/div>\t\t\t\t\t<div class=\"p-blogCard__body\">\n\t\t\t\t\t\t<a class=\"p-blogCard__title\" href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/camserver\/windows-auth\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u7d71\u5408Windows\u8a8d\u8a3c\u3067\u306eSSO | Web\u4f1a\u8b70\u306e Chat&amp;Messenger<\/a>\n\t\t\t\t\t\t<span class=\"p-blogCard__excerpt\">\u6982\u8981 Windows\u8a8d\u8a3c\u3092\u5229\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u304cWindows\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u3044\u308b\u8a8d\u8a3c\u60c5\u5831\u3092\u5229\u7528\u3057\u3001\u8ffd\u52a0\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067 CAMServer \u3078\u81ea\u52d5\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002 \u4ee5\u4e0b\u65b9\u5f0f\u306e\u3088\u3046\u306b II&#8230;<\/span>\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\n<h2>T\u1ed5ng quan v\u1ec1 x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p<\/h2>\n\n\n\n<p>X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p (IWA) l\u00e0 c\u01a1 ch\u1ebf t\u1ef1 \u0111\u1ed9ng cung c\u1ea5p th\u00f4ng tin x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng cho IIS khi IIS v\u00e0 ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp v\u00e0o c\u00f9ng m\u1ed9t mi\u1ec1n. Khi b\u1ea1n t\u1ea1o m\u1ed9t trang web b\u1eb1ng ASP.NET C#, b\u1ea1n c\u00f3 th\u1ec3 nh\u1eadn \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng v\u00e0 th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c.<\/p>\n\n\n\n<p>\u0110i\u1ec1u n\u00e0y cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp c\u00e1c \u1ee9ng d\u1ee5ng web \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef (ho\u1eb7c li\u00ean k\u1ebft) b\u1edfi IIS m\u00e0 kh\u00f4ng c\u1ea7n thao t\u00e1c \u0111\u0103ng nh\u1eadp b\u1ed5 sung v\u00e0 cho ph\u00e9p t\u00edch h\u1ee3p SSO v\u1edbi c\u00e1c m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng kh\u00e1c. <\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p>*N\u1ebfu b\u1ea1n kh\u00f4ng tham gia v\u00e0o c\u00f9ng m\u1ed9t mi\u1ec1n ho\u1eb7c n\u1ebfu ng\u01b0\u1eddi d\u00f9ng ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c truy c\u1eadp v\u00e0o trang IIS, v\u00f2ng quay \u0111\u0103ng nh\u1eadp s\u1ebd \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb v\u00e0 n\u1ebfu b\u1ea1n kh\u00f4ng x\u00e1c th\u1ef1c ch\u00ednh x\u00e1c, L\u1ed7i HTTP 401.1 - Kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00e9p s\u1ebd x\u1ea3y ra.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img width=\"1849\" height=\"781\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image.png\" alt=\"\" class=\"wp-image-11455\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h2>Lu\u1ed3ng SSO (\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n)<\/h2>\n\n\n\n<p>G\u00f3i Ultimate c\u1ee7a Chat&amp;Messenger t\u1ea1i ch\u1ed7 cho ph\u00e9p SSO v\u1edbi x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p. Lu\u1ed3ng SSO nh\u01b0 sau.<\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<ol><li>Tr\u01b0\u1edbc ti\u00ean, kh\u00e1ch h\u00e0ng truy c\u1eadp v\u00e0o trang x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p \/cam-iissso<\/li><li>Trang \/cam-iissso s\u1eed d\u1ee5ng ASP.NET \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh xem n\u00f3 c\u00f3 \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c hay kh\u00f4ng v\u00e0 li\u00ean k\u1ebft \u0111\u1ebfn CAMServer.<\/li><li>CAMServer th\u1ef1c hi\u1ec7n t\u00ecm ki\u1ebfm LDAP \u0111\u1ec3 x\u00e1c nh\u1eadn r\u1eb1ng \u0111\u00f3 l\u00e0 ng\u01b0\u1eddi d\u00f9ng AD th\u00f4ng th\u01b0\u1eddng, t\u1ea1o ssoToken (gi\u00e1 tr\u1ecb ng\u1eabu nhi\u00ean duy nh\u1ea5t t\u1eeb 30 byte tr\u1edf l\u00ean) v\u00e0 URL \u0111\u1ec3 truy c\u1eadp CAMServer, \u0111\u1ed3ng th\u1eddi y\u00eau c\u1ea7u chuy\u1ec3n h\u01b0\u1edbng.<\/li><li>Truy c\u1eadp CAMServer v\u00e0 x\u00e1c th\u1ef1c b\u1eb1ng ssoToken. N\u1ebfu x\u00e1c th\u1ef1c th\u00e0nh c\u00f4ng, ID phi\u00ean \u0111\u1ec3 truy c\u1eadp API s\u1ebd \u0111\u01b0\u1ee3c ch\u1ec9 \u0111\u1ecbnh.<\/li><\/ol>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img width=\"1377\" height=\"1246\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-19.png\" alt=\"\" class=\"wp-image-11532\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<p class=\"is-style-icon_info\">ID ng\u01b0\u1eddi d\u00f9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng s\u1ebd s\u1eed d\u1ee5ng SSO ph\u1ea3i kh\u1edbp v\u1edbi UserPrincipalName trong Active Directory v\u00e0 ph\u1ea3i \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd tr\u01b0\u1edbc trong Chat&amp;Messenger. UserPrincipalName l\u00e0 <a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/camserver\/thu-muc-hoat-dong-ldap\/#Get-ADUser\">T\u00f4i mu\u1ed1n l\u1ea5y danh s\u00e1ch ng\u01b0\u1eddi d\u00f9ng Active Directory v\u00e0 t\u1ea1o CSV.<\/a> Vui l\u00f2ng tham kh\u1ea3o th\u00eam th\u00f4ng tin sau.<\/p>\n\n\n\n<h2>Y\u00eau c\u1ea7u \u0111\u1ec3 \u0111\u1ea1t \u0111\u01b0\u1ee3c SSO<\/h2>\n\n\n\n<h3>Tham gia Windows Server v\u00e0o Domain<\/h3>\n\n\n\n<p>Vui l\u00f2ng k\u1ebft n\u1ed1i Windows Server ch\u1ea1y CAMServer\/IIS v\u00e0o mi\u1ec1n Active Directory.<\/p>\n\n\n\n<p class=\"is-style-crease\">\u0110\u1ec3 ki\u1ec3m tra t\u00ean mi\u1ec1n m\u00e0 Windows Server hi\u1ec7n t\u1ea1i \u0111ang tham gia, h\u00e3y v\u00e0o &quot;Tr\u00ecnh qu\u1ea3n l\u00fd m\u00e1y ch\u1ee7&quot; \u2192 nh\u1ea5p v\u00e0o &quot;M\u00e1y ch\u1ee7 c\u1ee5c b\u1ed9&quot; tr\u00ean menu b\u00ean tr\u00e1i \u2192 nh\u1ea5p v\u00e0o &quot;T\u00ean m\u00e1y t\u00ednh&quot; v\u00e0 tham kh\u1ea3o c\u1ed9t T\u00ean mi\u1ec1n.<\/p>\n\n\n\n<p>Ngo\u00e0i ra, IIS ph\u1ea3i n\u1eb1m tr\u00ean c\u00f9ng m\u1ed9t m\u00e1y ch\u1ee7 v\u1edbi CAMServer v\u00e0 ch\u1ea1y tr\u00ean c\u1ed5ng 80. N\u1ebfu b\u1ea1n \u0111\u1eb7t LoadBalancer tr\u01b0\u1edbc CAMServer, CAMServer s\u1ebd ch\u1ea1y tr\u00ean c\u1ed5ng 8080, do \u0111\u00f3 IIS c\u0169ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng c\u1ed5ng 443.<\/p>\n\n\n\n<h3>C\u00e0i \u0111\u1eb7t IIS<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p>\u30b5\u30fc\u30d0\u306e\u5f79\u5272\u304b\u3089IIS\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u304f\u3060\u3055\u3044\u3002IIS\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306b\u3001\u5f79\u5272\u30b5\u30fc\u30d3\u30b9\u306e\u9078\u629e\u30aa\u30d7\u30b7\u30e7\u30f3\u3067\u4ee5\u4e0b\u30c1\u30a7\u30c3\u30af\u3092\u884c\u3046\u3002<\/p>\n\n\n\n<ul><li>X\u00e1c th\u1ef1c Windows<\/li><li>B\u1ed9 l\u1ecdc ISAPI<\/li><li>ISAPI \u62e1\u5f35<\/li><\/ul>\n\n\n\n<p class=\"is-style-icon_pen\"><span class=\"swl-fz u-fz-xs\">B\u1ed9 l\u1ecdc ISAPI: H\u1ed7 tr\u1ee3 t\u1ea3i m\u00f4-\u0111un m\u1edf r\u1ed9ng trong IIS. B\u1eaft bu\u1ed9c ph\u1ea3i t\u1ea3i AspNetCoreModuleV2.<br><br>ISAPI \u62e1\u5f35: IIS \u306b ISAPI \u62e1\u5f35\u6a5f\u80fd\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002 AspNetCoreModuleV2 \u306e\u52d5\u4f5c\u306b\u5fc5\u9808\u3067\u3059\u3002 <\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"1399\" height=\"849\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/03\/image-5.png\" alt=\"\" class=\"wp-image-11669\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3>C\u00e0i \u0111\u1eb7t g\u00f3i l\u01b0u tr\u1eef ASP.NET Core<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p><a rel=\"noreferrer noopener\" href=\"https:\/\/dotnet.microsoft.com\/ja-jp\/download\/dotnet\/8.0\" target=\"_blank\">G\u00f3i l\u01b0u tr\u1eef l\u00f5i ASP.NET<\/a> \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u5f8c\u3001IIS\u3092\u518d\u8d77\u52d5\u3057\u3066\u30cf\u30f3\u30c9\u30e9\u30fc\u30de\u30c3\u30d4\u30f3\u30b0 \u306b AspNetCoreModuleV2 \u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<p class=\"is-style-icon_pen\"><span class=\"swl-fz u-fz-xs\">IIS \u74b0\u5883\u3067 ASP.NET Core \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u30db\u30b9\u30c8\u3059\u308b\u5834\u5408\u3001 ASP.NET Core Hosting Bundle \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3060\u3051\u3067OK\u3067\u3059\u3002<\/span><\/p>\n\n\n\n<p class=\"is-style-icon_pen\"><span class=\"swl-fz u-fz-xs\">ASP.NET Core \u30e9\u30f3\u30bf\u30a4\u30e0\u3092\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3059\u308b\u5834\u5408\u3082\u3001\u540c\u69d8\u306bHosting Bundle\u306e\u307f\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/span><span class=\"swl-fz u-fz-xs\">\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3067\u3069\u306e ASP.NET Core \u30e9\u30f3\u30bf\u30a4\u30e0 \u3067\u5b9f\u884c\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/span><br><span class=\"swl-fz u-fz-xs\">dotnet &#8211;list-runtimes<\/span><br><\/p>\n\n\n\n\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img width=\"1336\" height=\"845\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/01\/image.png\" alt=\"\" class=\"wp-image-12475\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"986\" height=\"206\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-4.png\" alt=\"\" class=\"wp-image-11459\"\/><figcaption>Kh\u1edfi \u0111\u1ed9ng l\u1ea1i IIS<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"965\" height=\"310\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-5.png\" alt=\"\" class=\"wp-image-11460\"\/><figcaption>X\u1eed l\u00fd \u00e1nh x\u1ea1<\/figcaption><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3>Th\u00eam \u1ee9ng d\u1ee5ng (cam-iissso)<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p> Th\u00eam \u1ee9ng d\u1ee5ng cam-iissso v\u00e0o Trang web m\u1eb7c \u0111\u1ecbnh.<\/p>\n\n\n\n<ul><li>B\u00ed danh: cam-iissso <\/li><li>\u0110\u01b0\u1eddng d\u1eabn v\u1eadt l\u00fd: \\sys\\cam-iissso-net8.0<\/li><\/ul>\n\n\n\n\n\n\n\n\n\n\n\n<p>Ngo\u00e0i ra, c\u1ea5p quy\u1ec1n truy c\u1eadp xem (\u0111\u1ecdc v\u00e0 th\u1ef1c thi, li\u1ec7t k\u00ea n\u1ed9i dung th\u01b0 m\u1ee5c, \u0111\u1ecdc) cho th\u01b0 m\u1ee5c cam-iissso-net8.0 cho nh\u00f3m IIS_IUSRS.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"685\" height=\"441\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-18.png\" alt=\"\" class=\"wp-image-11528\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img width=\"1012\" height=\"588\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-16.png\" alt=\"\" class=\"wp-image-11521\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3>K\u00edch ho\u1ea1t x\u00e1c th\u1ef1c Windows<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p>Nh\u1ea5p chu\u1ed9t ph\u1ea3i v\u00e0o &quot;X\u00e1c th\u1ef1c Windows&quot; v\u00e0 ch\u1ecdn &quot;B\u1eadt&quot;.<\/p>\n\n\n\n<p class=\"is-style-icon_info\"> N\u1ebfu &quot;X\u00e1c th\u1ef1c \u1ea9n danh&quot; \u0111\u01b0\u1ee3c b\u1eadt, vui l\u00f2ng t\u1eaft n\u00f3.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"944\" height=\"360\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-8.png\" alt=\"\" class=\"wp-image-11463\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 id=\"internet-options-settings\">\u0110\u1eb7t t\u00f9y ch\u1ecdn Internet<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<h4>Th\u00eam trang web do IIS cung c\u1ea5p v\u00e0o v\u00f9ng m\u1ea1ng n\u1ed9i b\u1ed9 <\/h4>\n\n\n\n<p>Ch\u1ecdn T\u00f9y ch\u1ecdn Internet, nh\u1ea5p v\u00e0o tab B\u1ea3o m\u1eadt, ch\u1ecdn M\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee5c b\u1ed9 Nh\u1ea5p v\u00e0o n\u00fat Trang web, ch\u1ecdn C\u00e0i \u0111\u1eb7t n\u00e2ng cao v\u00e0 th\u00eam URL trang web<\/p>\n\n\n\n<h4>Ki\u1ec3m tra \u0111\u0103ng nh\u1eadp t\u1ef1 \u0111\u1ed9ng <\/h4>\n\n\n\n<p>Nh\u1ea5p v\u00e0o &quot;C\u1ea5p t\u00f9y ch\u1ec9nh&quot; v\u00e0 trong &quot;X\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng&quot; \u2192 &quot;\u0110\u0103ng nh\u1eadp&quot;, \u0111\u1ea3m b\u1ea3o &quot;\u0110\u0103ng nh\u1eadp t\u1ef1 \u0111\u1ed9ng trong v\u00f9ng m\u1ea1ng n\u1ed9i b\u1ed9&quot; \u0111\u01b0\u1ee3c ch\u1ecdn.<\/p>\n\n\n\n<p class=\"is-style-icon_pen\"><span class=\"swl-fz u-fz-s\">C\u00e0i \u0111\u1eb7t n\u00e0y l\u00e0 b\u1eaft bu\u1ed9c tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i m\u00e1y kh\u00e1ch c\u1ee7a ng\u01b0\u1eddi d\u00f9ng C&amp;M nh\u01b0ng n\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd t\u1eadp trung b\u1eb1ng B\u1ea3ng \u0111i\u1ec1u khi\u1ec3n qu\u1ea3n l\u00fd ch\u00ednh s\u00e1ch nh\u00f3m.<\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"1290\" height=\"994\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-9.png\" alt=\"\" class=\"wp-image-11464\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"619\" height=\"774\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-10.png\" alt=\"\" class=\"wp-image-11465\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3>C\u00e0i \u0111\u1eb7t LDAP<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p>Khi th\u1ef1c hi\u1ec7n \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n b\u1eb1ng IIS,<a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/camserver\/thu-muc-hoat-dong-ldap\/#LDAP-config\" target=\"_blank\" rel=\"noreferrer noopener\">C\u00e0i \u0111\u1eb7t LDAP<\/a>(LDAPUrl, LDAPBaseDN, ng\u01b0\u1eddi d\u00f9ng AD th\u1ef1c hi\u1ec7n x\u00e1c th\u1ef1c proxy) l\u00e0 b\u1eaft bu\u1ed9c. <\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img width=\"1449\" height=\"951\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-12.png\" alt=\"\" class=\"wp-image-11492\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 id=\"fqdn-spn\">Truy c\u1eadp th\u00f4ng qua FQDN (t\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n) v\u00e0 \u0111\u0103ng k\u00fd SPN<\/h3>\n\n\n\n<p>\u0110i\u1ec1u n\u00e0y kh\u00f4ng c\u1ea7n thi\u1ebft n\u1ebfu b\u1ea1n truy c\u1eadp trang X\u00e1c th\u1ef1c t\u00edch h\u1ee3p Windows c\u1ee7a IIS b\u1eb1ng t\u00ean m\u00e1y ch\u1ee7 (t\u00ean NetBIOS), nh\u01b0ng b\u1ea1n ph\u1ea3i \u0111\u0103ng k\u00fd SPN n\u1ebfu truy c\u1eadp b\u1eb1ng FQDN (t\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n, v\u00ed d\u1ee5: sso.example.com).<\/p>\n\n\n\n<p>SPN (T\u00ean d\u1ecbch v\u1ee5 ch\u00ednh) l\u00e0 t\u00ean d\u00f9ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh duy nh\u1ea5t m\u1ed9t d\u1ecbch v\u1ee5 c\u1ee5 th\u1ec3 tr\u00ean Active Directory trong x\u00e1c th\u1ef1c Kerberos. N\u1ebfu b\u1ea1n truy c\u1eadp d\u1ecbch v\u1ee5 b\u1eb1ng FQDN, vi\u1ec7c \u0111\u0103ng k\u00fd SPN s\u1ebd cho ph\u00e9p m\u00e1y kh\u00e1ch y\u00eau c\u1ea7u th\u00e0nh c\u00f4ng phi\u1ebfu Kerberos cho d\u1ecbch v\u1ee5 b\u1ea1n \u0111ang truy c\u1eadp.<\/p>\n\n\n\n<p>V\u00ed d\u1ee5 <code>https:\/\/sso.example.com<\/code> Khi truy c\u1eadp, m\u00e1y kh\u00e1ch (tr\u00ecnh duy\u1ec7t) y\u00eau c\u1ea7u m\u1ed9t phi\u1ebfu t\u1eeb Active Directory, n\u00f3i r\u1eb1ng &quot;T\u00f4i mu\u1ed1n k\u1ebft n\u1ed1i v\u1edbi d\u1ecbch v\u1ee5 c\u00f3 t\u00ean l\u00e0 HTTP\/sso.example.com.&quot; Active Directory x\u00e1c \u0111\u1ecbnh SPN \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi t\u00e0i kho\u1ea3n n\u00e0o v\u00e0 c\u1ea5p phi\u1ebfu d\u1ecbch v\u1ee5 t\u01b0\u01a1ng \u1ee9ng. N\u1ebfu SPN kh\u00f4ng \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd \u0111\u00fang c\u00e1ch, x\u00e1c th\u1ef1c Kerberos s\u1ebd kh\u00f4ng th\u00e0nh c\u00f4ng, d\u1eabn \u0111\u1ebfn h\u1ed9p tho\u1ea1i x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb.<\/p>\n\n\n\n<p>Vi\u1ec7c \u0111\u0103ng k\u00fd SPN \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n tr\u00ean t\u00e0i kho\u1ea3n m\u00e1y t\u00ednh l\u01b0u tr\u1eef IIS. V\u00ed d\u1ee5,<code>qu\u1ea3ng c\u00e1o<\/code> \u0110\u1ed1i v\u1edbi IIS ch\u1ea1y v\u1edbi t\u00ean m\u00e1y ch\u1ee7, h\u00e3y \u0111\u0103ng k\u00fd SPN nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>setspn -S HTTP\/sso.example.com ad$<\/code><\/pre>\n\n\n\n<p>Sau khi \u0111\u0103ng k\u00fd, b\u1ea1n c\u00f3 th\u1ec3 ki\u1ec3m tra b\u1eb1ng l\u1ec7nh sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>setspn -L ad$<\/code><\/pre>\n\n\n\n<p>K\u1ebft qu\u1ea3 n\u00e0y <code>HTTP\/sso.example.com<\/code> N\u1ebfu hi\u1ec3n th\u1ecb th\u00ec ngh\u0129a l\u00e0 \u0111\u00e3 \u0111\u0103ng k\u00fd SPN th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n<h3>Kh\u00f4ng kh\u1ea3 d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng k\u1ebft n\u1ed1i proxy HTTP<\/h3>\n\n\n\n<p>Xin l\u01b0u \u00fd r\u1eb1ng SSO kh\u00f4ng th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng k\u1ebft n\u1ed1i proxy HTTP.<\/p>\n\n\n\n<h2>C\u1ea5u h\u00ecnh trong m\u00f4i tr\u01b0\u1eddng LoadBalancer + SSL<\/h2>\n\n\n\n<p>N\u1ebfu b\u1ea1n \u0111ang s\u1eed d\u1ee5ng X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p IIS trong m\u00f4i tr\u01b0\u1eddng LoadBalancer + SSL, vui l\u00f2ng tham kh\u1ea3o b\u00e0i vi\u1ebft blog sau.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-web\u4f1a\u8b70\u306e-chat-amp-messenger wp-block-embed-web\u4f1a\u8b70\u306e-chat-amp-messenger\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/chat-messenger.com\/blog\/windowsauthentication-loadbalancer-ssl\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-web\u4f1a\u8b70\u306e-chat-amp-messenger wp-block-embed-web\u4f1a\u8b70\u306e-chat-amp-messenger\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/chat-messenger.com\/blog\/windowsauthentication-setspn\n<\/div><\/figure>","protected":false},"excerpt":{"rendered":"<p>\u65b0\u3057\u304f\u5c0e\u5165\u3059\u308b\u74b0\u5883\u3067\u306f\u4ee5\u4e0b\u3092\u3054\u5229\u7528\u304f\u3060\u3055\u3044\u3002 \u7d71\u5408Windows\u8a8d\u8a3c\u306e\u6982\u8981 \u7d71\u5408Windows\u8a8d\u8a3c\uff08Integ [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":""},"categories":[17],"tags":[],"_links":{"self":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454"}],"collection":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/comments?post=11454"}],"version-history":[{"count":10,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454\/revisions"}],"predecessor-version":[{"id":12670,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/11454\/revisions\/12670"}],"wp:attachment":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/media?parent=11454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/categories?post=11454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/tags?post=11454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}