I was recently at a client site who was having problems with their Single Sign-On Settings. They were using RSA ClearTrust with ALUI running behind WebLogic 8.1 and were seeing performance issues related to SSO. We started troubleshooting the problem by looking at a combination of RSA settings, the portalconfig.xml, and various settings on Apache and WebLogic.
The first thing that we found, which is a common best practice that is avoided, was that the whole portal application was protected by SSO instead of just the SSOServlet. When SSO is enabled in the portal, the first thing the...