1 Overview
1.1 SSOWatch module of Quest ESSO: Basic Principles
2 SSOWatch
1.1.1 Application Modeling
1.1.2 Application Access Profiles
1.1.3 Password Format Control Policies (PFCP)
1.1.4 Application Behavior
1.1.5 Window Types
1.1.6 LDAP Directories
1.2 The Access Collector Mode
1.3 SSOWatch Components
2.1 Overview
2.2 The SSOWatch Interface
2.3 Starting/Quitting SSOWatch
2.4 Suspending/Activating SSOWatch
2.5 Resetting SSOWatch Configuration
2.6 Managing User Accounts
3 Configuration Editor: Enterprise SSO Studio
2.6.1 Providing SSO Data When Launching an SSO Enabled Application for the First Time
2.6.2 Displaying your SSOWatch User Accounts
2.6.3 Displaying the Properties of a User Account
2.6.4 Changing the Login Name and/or Password of a User Account
2.6.5 Changing an Expired Primary Password
2.6.6 Creating a New Account for an Application
2.6.7 Deleting a User Account
2.6.8 Displaying User Account Password
2.6.9 Delegating a User Account
2.7 Disabling/Enabling SSO for Applications
2.8 Requesting an Access to an Application Through the Request Manager Portal
2.9 Testing the SSO Configuration of an Application
2.10 Starting Personal SSO Studio
2.11 Starting an Application
2.12 Creating a Shortcut for an Application
2.13 Removing the Icon from the Notification Area
3.1 Interface Overview
3.2 Starting and Stopping Enterprise SSO Studio
3.3 Creating or Opening a Configuration
3.4 Configuring General SSO Parameters
3.5 Defining PFCP and Application Profiles
4 The Generic Plug-in
3.5.1 Defining Password Format Control Policies (PFCP)
3.6 Defining Application and Technical Definition Objects
3.5.1.1 "Password Management Policy" Tab - Description
3.5.1.2 "Password Format Policy" Tab - Description
3.5.2 Defining the Application Profiles
3.6.1 Creating/Modifying Application Objects and Technical Definitions
3.7 Defining Window Objects
3.8 Testing the SSO
3.9 Exporting or Importing Objects
3.6.1.1 Creating a New Application Object or Technical Definition
3.6.1.2 Modifying an Application Object or Technical Definition Configuration
3.6.2 Filling-in the Application Properties Window
3.6.2.1 "Properties" Tab of an Application Object
3.6.2.2 "Properties" Tab of a Technical Definition Object
3.6.2.3 "Account Base" Tab of an Application Object
3.6.2.4 "Launcher" Tab
3.6.2.5 "Parameters" Tab
3.6.2.6 "Application Profile" Tab
3.6.3 Defining Advanced Access Rights
3.9.1 Exporting/Importing Objects using the Graphical Interface
3.9.2 Importing Objects using Command Line Arguments (without Controller)
3.10 Managing Objects in the Tree
3.10.1 Copying/Cutting/Pasting Objects
3.10.2 Renaming an Object
3.10.3 Deleting an Object from the Tree
3.11 Saving Object Configurations
3.11.1 Saving Object Configurations in LDAP Storage Mode (with Controller)
3.11.2 Saving Object Configurations in Local Storage Mode
3.12 Managing Configuration Updates
3.13 Refreshing the Tree
4.1 Window Detection
5 The Microsoft Internet Explorer Plugin
4.1.1 Simple Detection
4.1.2 Advanced Detection
4.2 User Interface
4.3 Generic Plug-in Actions
4.1.2.1 The Enable Variable URL Detection Option
4.1.2.2 The Look for Text Option
4.1.2.3 The Advanced Button
4.1.3 Restrictions
4.3.1 StandardLogin – Connection
4.4 Special Cases
4.3.1.1 Window Description
4.3.1.2 Specifying Additional Fields (Optional)
4.3.1.3 SSOWatch Behavior
4.3.2 BadPassword
4.3.3 NewPassword
4.3.4 ConfirmPassword
4.3.5 BadNewPassword
5.1 HTML/Internet Explorer Detection
5.2 User Interface
5.3 HTML/Internet Explorer Actions
6 The SAP R/3 Plug-in
6.1 SAPLogin and SAPExpired Window Types
6.2 Basic Principles of the SAP R/3 Plug-in
6.3 Configuration Guide
7 Terminal Type Applications
8 The HLLAPI Plug-in
8.1 Configuring the HLLAPI Plug-in
9 Advanced Configuration
8.1.1 Configuring the HLLAPI Plug-in for a Single Application
8.1.2 Configuring the HLLAPI Plug-in for Different Types of Applications
8.1.3 HLLAPI Plug-in Registry Keys
8.2 Enabling SSO for HLLAPI Applications
8.3 HLLAPI Applications Keys
9.1 Custom Scripts Plug-ins
9.2 Extension DLL
10 OLE/Automation Interface
10.1 Definition of SSOWatch OLE/Automation Interface
10.2 The ISSOEngine Interface
10.3 The ISSOApplication Interface
10.4 Code Example
10.5 Return Codes
Appendix A: Cache Tuning and Asynchronous Update of the Application Data
Appendix B: Integrating Care-FX with SSOWatch
3.7.2. Execution Options Area
This option allows you to hide the window of an application by a SSOWatch window displaying a customizable text. You can use this option if you do not want that the user sees his/her login/password for example.
3.7.2.3 Advanced Options area
 |
 |
|
|
|
|
|
3.7.3 "Detection" and "Actions" Tabs
The Detection and Actions tabs are described in the sections of this guide that are related to the "plug-in types", as their content depends on the selected window type.
3.8 Testing the SSO
Enterprise SSO Studio allows you to test the SSO configuration you have created.
|
• |
This functionality is available only if you use Enterprise SSO Studio with Controller. |
|
1. |
In the Enterprise SSO Studio main window, right-click the Technical definitions you want to test and click Add to Test List. |
|
|
To remove a technical definition from the list, right-click the object and select Remove from Test List. |
A confirmation window appears, to inform you that SSOWatch is about to be started in test mode.
|
3. |
Click OK. |
The SSOWatch Account panel displays only the selected technical definitions: you can start the applications corresponding to these technical definitions to test the windows detection and the collection of the security data, without any modifications in the directory.
|
|
|