Single Sign-on (SSO)

Have you seen this

Configure the Orion Web Console for SSL with NPM - SolarWinds Worldwide, LLC. Help and Support

Does your Websites table in your database have this: SSLEnabled=1

The automatic logon to Orion is configurable via the Configuration Wizard. Select Website and then toggle this setting to either yes or no.

And the link that d09h​ provide can help you setup SSL in Orion but there are some prerequisites that have to be done before. You have to generate a self-signed certificate and associate it with IIS.

How to Create a Self Signed Certificate in IIS 7 

Sounds like you DON'T want SSO. If a computer is domain joined, and a person browses to Orion via IE, it uses NTLM so IE automatically signs in, hence SSO.  If you don't want a user to automatically sign in using IE, then use Firefox, and the user has to login  manually.

Of course the user will need to have their Domain credentials added to Orion in order to login, so another method is to not use AD to login and create individual accounts on Orion, then they have to login manually, but if they also choose to save password, they are back to automatically logging in when they browse to the site.

The way I have it setup for us is that if I want someone to have access I add their AD creds to Orion and have them browse to Orion using IE, that way the login automatically, so they only need to sign on via the computer domain login with Ctrl-Alt-Delete when  they start their day.

I want something like this. But i guess if i enable this pop up it will not log in automatically and have to re-enter credentials for the orion web page. how can i get this pop up to be enabled for all the users trying to access orion web page. is there something to do with active directory or ADFS?? i was asked by my system admin to enable this and i am not sure how to do it.

Also can you guys tell me what is the below screenshot for??

So there are really only two options that I'm aware of, and neither really fit the description you've provided. Either option is going to be using Windows accounts or groups that have been set up in Settings > All Settings > Manage Accounts.

1. Use AD credentials without automatic login. This wouldn't show a popup at all. This would use the standard logon page where users could type 'domain/username' with their password to gain access. Logon would be required every time.
2. Use AD credentials with automatic login. This is a setting enabled through the Configuration Wizard as mentioned earlier. It's functionality may or may not work depending on the type of browser that is being used. If it doesn't automatically log a user in then it'll revert to option 1.

The LDAP screenshot you post is specifically for non-Windows AD based LDAP deployments. If you're using either option above you'll want to make sure this LDAP option is turned off.

Users are using AD credentials to login and they can log in automatically everytime they access the orion web page. But my system team is asking to enable SSO authentication as per their new security policies. So there is no way to enable sso authentication on solarwinds??. I have been checking for this and i found that we can enable SSO authentication with WHD (Web Help Desk ) which uses SAML and ADFS. I do not have WHD. I am running SAM, NPM, WPM  and other modules. can i achieve this without using WHD??

Sorry if i am asking too many things.. i am not a windows guy and don't understand these things easily. I checked with system team and they said we can have SSO authentication either through SAML, ADFS or direct through AD. So if i go with direct AD or ADFS or SAML do i have to do anything on solarwinds??

Yeah, the term SSO is a little misleading. Orion (SAM, NPM, WPM) does not support SAML or ADFS. The only thing it supports is AD logon based on what AD domain the Orion server is joined too. You can go to Settings > All Settings > Manage Accounts and click Add and select Windows Account or Windows Group. That's the best it can do.

Native SAML 2.0 support for Orion is included in the NPM 12.4 Release Candidate which can be downloaded from your Customer Portal now.