1 Overview
1.1 SSOWatch module of Quest ESSO: Basic Principles
2 SSOWatch
1.1.1 Application Modeling
1.1.2 Application Access Profiles
1.1.3 Password Format Control Policies (PFCP)
1.1.4 Application Behavior
1.1.5 Window Types
1.1.6 LDAP Directories
1.2 The Access Collector Mode
1.3 SSOWatch Components
2.1 Overview
2.2 The SSOWatch Interface
2.3 Starting/Quitting SSOWatch
2.4 Suspending/Activating SSOWatch
2.5 Resetting SSOWatch Configuration
2.6 Managing User Accounts
3 Configuration Editor: Enterprise SSO Studio
2.6.1 Providing SSO Data When Launching an SSO Enabled Application for the First Time
2.6.2 Displaying your SSOWatch User Accounts
2.6.3 Displaying the Properties of a User Account
2.6.4 Changing the Login Name and/or Password of a User Account
2.6.5 Changing an Expired Primary Password
2.6.6 Creating a New Account for an Application
2.6.7 Deleting a User Account
2.6.8 Displaying User Account Password
2.6.9 Delegating a User Account
2.7 Disabling/Enabling SSO for Applications
2.8 Requesting an Access to an Application Through the Request Manager Portal
2.9 Testing the SSO Configuration of an Application
2.10 Starting Personal SSO Studio
2.11 Starting an Application
2.12 Creating a Shortcut for an Application
2.13 Removing the Icon from the Notification Area
3.1 Interface Overview
3.2 Starting and Stopping Enterprise SSO Studio
3.3 Creating or Opening a Configuration
3.4 Configuring General SSO Parameters
3.5 Defining PFCP and Application Profiles
4 The Generic Plug-in
3.5.1 Defining Password Format Control Policies (PFCP)
3.6 Defining Application and Technical Definition Objects
3.5.1.1 "Password Management Policy" Tab - Description
3.5.1.2 "Password Format Policy" Tab - Description
3.5.2 Defining the Application Profiles
3.6.1 Creating/Modifying Application Objects and Technical Definitions
3.7 Defining Window Objects
3.8 Testing the SSO
3.9 Exporting or Importing Objects
3.6.1.1 Creating a New Application Object or Technical Definition
3.6.1.2 Modifying an Application Object or Technical Definition Configuration
3.6.2 Filling-in the Application Properties Window
3.6.2.1 "Properties" Tab of an Application Object
3.6.2.2 "Properties" Tab of a Technical Definition Object
3.6.2.3 "Account Base" Tab of an Application Object
3.6.2.4 "Launcher" Tab
3.6.2.5 "Parameters" Tab
3.6.2.6 "Application Profile" Tab
3.6.3 Defining Advanced Access Rights
3.9.1 Exporting/Importing Objects using the Graphical Interface
3.9.2 Importing Objects using Command Line Arguments (without Controller)
3.10 Managing Objects in the Tree
3.10.1 Copying/Cutting/Pasting Objects
3.10.2 Renaming an Object
3.10.3 Deleting an Object from the Tree
3.11 Saving Object Configurations
3.11.1 Saving Object Configurations in LDAP Storage Mode (with Controller)
3.11.2 Saving Object Configurations in Local Storage Mode
3.12 Managing Configuration Updates
3.13 Refreshing the Tree
4.1 Window Detection
5 The Microsoft Internet Explorer Plugin
4.1.1 Simple Detection
4.1.2 Advanced Detection
4.2 User Interface
4.3 Generic Plug-in Actions
4.1.2.1 The Enable Variable URL Detection Option
4.1.2.2 The Look for Text Option
4.1.2.3 The Advanced Button
4.1.3 Restrictions
4.3.1 StandardLogin – Connection
4.4 Special Cases
4.3.1.1 Window Description
4.3.1.2 Specifying Additional Fields (Optional)
4.3.1.3 SSOWatch Behavior
4.3.2 BadPassword
4.3.3 NewPassword
4.3.4 ConfirmPassword
4.3.5 BadNewPassword
5.1 HTML/Internet Explorer Detection
5.2 User Interface
5.3 HTML/Internet Explorer Actions
6 The SAP R/3 Plug-in
6.1 SAPLogin and SAPExpired Window Types
6.2 Basic Principles of the SAP R/3 Plug-in
6.3 Configuration Guide
7 Terminal Type Applications
8 The HLLAPI Plug-in
8.1 Configuring the HLLAPI Plug-in
9 Advanced Configuration
8.1.1 Configuring the HLLAPI Plug-in for a Single Application
8.1.2 Configuring the HLLAPI Plug-in for Different Types of Applications
8.1.3 HLLAPI Plug-in Registry Keys
8.2 Enabling SSO for HLLAPI Applications
8.3 HLLAPI Applications Keys
9.1 Custom Scripts Plug-ins
9.2 Extension DLL
10 OLE/Automation Interface
10.1 Definition of SSOWatch OLE/Automation Interface
10.2 The ISSOEngine Interface
10.3 The ISSOApplication Interface
10.4 Code Example
10.5 Return Codes
Appendix A: Cache Tuning and Asynchronous Update of the Application Data
Appendix B: Integrating Care-FX with SSOWatch
3.5 Defining PFCP and Application Profiles
If you use Enterprise SSO Studio without Controller or Personal SSO Studio, you can define the following configuration properties:
 |
With Controller, this configuration can be performed with the Quest ESSO administration console (see Quest ESSO Console Administrator Guide). |
3.5.1 Defining Password Format Control Policies (PFCP)
A default PFCP configuration exists in Enterprise SSO Studio: you can modify it or create a new one.
The PFCP configuration is only available if you use Enterprise SSO Studio without Controller mode or Personal SSO Studio. With Controller, the PFCP configuration must be done with the administration console (see Quest ESSO Console Administrator Guide).
|
1. |
In the Enterprise SSO Studio main window, do one of the following, depending on the action you want to perform: |
|
• |
|
• |
|
• |
|
3. |
3.5.1.1 "Password Management Policy" Tab - Description
The Password Management Policy tab allows you to define the following PFCP elements:
|
• |
3.5.1.2 "Password Format Policy" Tab - Description
The Password Format Policy tab allows you to define the following elements:
|
• |
Password Format Defines how a valid password is created: minimum and maximum password lengths, and the minimum and maximum number of upper-case letters, lower-case letters (excluding accented characters), numbers, or special characters that should make up a valid password. |
The special characters supported by SSOWatch are listed in the following table:
 |
|
• |
|
• |
Test Password Generation button |