Use to leverage the authentication already done on the windows workstation.


Name Description Default value Mandatory
idpID The internal identifier of the idp used N/A Yes
pipeID ID of the pipe to execute used to verify user credentials N/A Yes
loginTemplate Template used when presenting end-user UI. This template is wher euser enters credantials login.template No
allowLanguageChange Should user be able to change template language N/A No
enableHoneypot Enable/disable bot protection true No
translationKey Body used in template. Value in this will try to map against language used by end-user login.messages.information.body No
includeQueryString Should initial query string parameters be passed on false No
errorRedirect Where to send user agent if pipe fails N/A No

Example Configuration

    "alias": "samlwin",
    "name": "SAMLWindowsSSO",
    "configuration": {
        "idpID": "",
        "pipeID": "authPipe1"
    "id": "samlwin"


PAS must be installed on a windows host belonging to the same domain as the clients used by the users.