1 Overview
1.1 SSOWatch module of Quest ESSO: Basic Principles
2 SSOWatch
1.1.1 Application Modeling
1.1.2 Application Access Profiles
1.1.3 Password Format Control Policies (PFCP)
1.1.4 Application Behavior
1.1.5 Window Types
1.1.6 LDAP Directories
1.2 The Access Collector Mode
1.3 SSOWatch Components
2.1 Overview
2.2 The SSOWatch Interface
2.3 Starting/Quitting SSOWatch
2.4 Suspending/Activating SSOWatch
2.5 Resetting SSOWatch Configuration
2.6 Managing User Accounts
3 Configuration Editor: Enterprise SSO Studio
2.6.1 Providing SSO Data When Launching an SSO Enabled Application for the First Time
2.6.2 Displaying your SSOWatch User Accounts
2.6.3 Displaying the Properties of a User Account
2.6.4 Changing the Login Name and/or Password of a User Account
2.6.5 Changing an Expired Primary Password
2.6.6 Creating a New Account for an Application
2.6.7 Deleting a User Account
2.6.8 Displaying User Account Password
2.6.9 Delegating a User Account
2.7 Disabling/Enabling SSO for Applications
2.8 Requesting an Access to an Application Through the Request Manager Portal
2.9 Testing the SSO Configuration of an Application
2.10 Starting Personal SSO Studio
2.11 Starting an Application
2.12 Creating a Shortcut for an Application
2.13 Removing the Icon from the Notification Area
3.1 Interface Overview
3.2 Starting and Stopping Enterprise SSO Studio
3.3 Creating or Opening a Configuration
3.4 Configuring General SSO Parameters
3.5 Defining PFCP and Application Profiles
4 The Generic Plug-in
3.5.1 Defining Password Format Control Policies (PFCP)
3.6 Defining Application and Technical Definition Objects
3.5.1.1 "Password Management Policy" Tab - Description
3.5.1.2 "Password Format Policy" Tab - Description
3.5.2 Defining the Application Profiles
3.6.1 Creating/Modifying Application Objects and Technical Definitions
3.7 Defining Window Objects
3.8 Testing the SSO
3.9 Exporting or Importing Objects
3.6.1.1 Creating a New Application Object or Technical Definition
3.6.1.2 Modifying an Application Object or Technical Definition Configuration
3.6.2 Filling-in the Application Properties Window
3.6.2.1 "Properties" Tab of an Application Object
3.6.2.2 "Properties" Tab of a Technical Definition Object
3.6.2.3 "Account Base" Tab of an Application Object
3.6.2.4 "Launcher" Tab
3.6.2.5 "Parameters" Tab
3.6.2.6 "Application Profile" Tab
3.6.3 Defining Advanced Access Rights
3.9.1 Exporting/Importing Objects using the Graphical Interface
3.9.2 Importing Objects using Command Line Arguments (without Controller)
3.10 Managing Objects in the Tree
3.10.1 Copying/Cutting/Pasting Objects
3.10.2 Renaming an Object
3.10.3 Deleting an Object from the Tree
3.11 Saving Object Configurations
3.11.1 Saving Object Configurations in LDAP Storage Mode (with Controller)
3.11.2 Saving Object Configurations in Local Storage Mode
3.12 Managing Configuration Updates
3.13 Refreshing the Tree
4.1 Window Detection
5 The Microsoft Internet Explorer Plugin
4.1.1 Simple Detection
4.1.2 Advanced Detection
4.2 User Interface
4.3 Generic Plug-in Actions
4.1.2.1 The Enable Variable URL Detection Option
4.1.2.2 The Look for Text Option
4.1.2.3 The Advanced Button
4.1.3 Restrictions
4.3.1 StandardLogin – Connection
4.4 Special Cases
4.3.1.1 Window Description
4.3.1.2 Specifying Additional Fields (Optional)
4.3.1.3 SSOWatch Behavior
4.3.2 BadPassword
4.3.3 NewPassword
4.3.4 ConfirmPassword
4.3.5 BadNewPassword
5.1 HTML/Internet Explorer Detection
5.2 User Interface
5.3 HTML/Internet Explorer Actions
6 The SAP R/3 Plug-in
6.1 SAPLogin and SAPExpired Window Types
6.2 Basic Principles of the SAP R/3 Plug-in
6.3 Configuration Guide
7 Terminal Type Applications
8 The HLLAPI Plug-in
8.1 Configuring the HLLAPI Plug-in
9 Advanced Configuration
8.1.1 Configuring the HLLAPI Plug-in for a Single Application
8.1.2 Configuring the HLLAPI Plug-in for Different Types of Applications
8.1.3 HLLAPI Plug-in Registry Keys
8.2 Enabling SSO for HLLAPI Applications
8.3 HLLAPI Applications Keys
9.1 Custom Scripts Plug-ins
9.2 Extension DLL
10 OLE/Automation Interface
10.1 Definition of SSOWatch OLE/Automation Interface
10.2 The ISSOEngine Interface
10.3 The ISSOApplication Interface
10.4 Code Example
10.5 Return Codes
Appendix A: Cache Tuning and Asynchronous Update of the Application Data
Appendix B: Integrating Care-FX with SSOWatch
2.9 Testing the SSO Configuration of an Application
The SSOWatch engine includes a test tool, which allows you to check if an application is correctly configured. It tests the following:
|
• |
You have configured the Application Profile associated with the application to test: the test tool is launched by clicking Test application on the shortcut menu that appears when you right-click an application displayed in the Account panel. This command is available only if the Application Profile associated with the selected application is correctly configured, as detailed in: |
|
• |
Section 3.5.2.1 "Properties" Tab of an Application Profile, for your Personal SSO Studio configuration. |
|
• |
Quest ESSO Console Administrator Guide, for corporate applications. |
|
1. |
From the Account panel, right-click the application to test and select Test application. |
|
• |
The Window configuration information area displays by default information on the window selected in the drop-down list (window title and URL configuration if any). You can change this information by selecting another window using the target button. This feature is useful to check if an SSO configuration works with a new version of an application for example. |
|
• |
When the main window detection succeeds, the SSOWatch engine does the following tests: |
|
• |
It checks the variable URLs and Look for text parameters if any. The test stops on the first detected invalid parameter. You can bypass the test of these parameters by selecting the Bypass the advanced detection control check box. |
|
• |
Finally, the engine tests the detection of the configured fields. The test stops on the first detected invalid field. If the field detection succeeds, you can select the Perform SSO check box. This starts immediately the real SSO process. |
|
• |
The Export button allows you to save in a plain text file the information displayed in the Live report area. |
2.10 Starting Personal SSO Studio
|
• |
To start Personal SSO Studio from the Account panel, right-click any application and select Open SSO Studio. |
 |
|
2.11 Starting an Application
To start an application from the Account panel, follow the procedure below.
|
|
|
• |
The application starts and SSOWatch performs SSO.
|
|
2.12 Creating a Shortcut for an Application
You can create shortcuts for applications from the Account panel, as described in the following procedure.
|
|
|
• |