1 Overview
1.1 SSOWatch module of Quest ESSO: Basic Principles
2 SSOWatch
1.1.1 Application Modeling
1.1.2 Application Access Profiles
1.1.3 Password Format Control Policies (PFCP)
1.1.4 Application Behavior
1.1.5 Window Types
1.1.6 LDAP Directories
1.2 The Access Collector Mode
1.3 SSOWatch Components
2.1 Overview
2.2 The SSOWatch Interface
2.3 Starting/Quitting SSOWatch
2.4 Suspending/Activating SSOWatch
2.5 Resetting SSOWatch Configuration
2.6 Managing User Accounts
3 Configuration Editor: Enterprise SSO Studio
2.6.1 Providing SSO Data When Launching an SSO Enabled Application for the First Time
2.6.2 Displaying your SSOWatch User Accounts
2.6.3 Displaying the Properties of a User Account
2.6.4 Changing the Login Name and/or Password of a User Account
2.6.5 Changing an Expired Primary Password
2.6.6 Creating a New Account for an Application
2.6.7 Deleting a User Account
2.6.8 Displaying User Account Password
2.6.9 Delegating a User Account
2.7 Disabling/Enabling SSO for Applications
2.8 Requesting an Access to an Application Through the Request Manager Portal
2.9 Testing the SSO Configuration of an Application
2.10 Starting Personal SSO Studio
2.11 Starting an Application
2.12 Creating a Shortcut for an Application
2.13 Removing the Icon from the Notification Area
3.1 Interface Overview
3.2 Starting and Stopping Enterprise SSO Studio
3.3 Creating or Opening a Configuration
3.4 Configuring General SSO Parameters
3.5 Defining PFCP and Application Profiles
4 The Generic Plug-in
3.5.1 Defining Password Format Control Policies (PFCP)
3.6 Defining Application and Technical Definition Objects
3.5.1.1 "Password Management Policy" Tab - Description
3.5.1.2 "Password Format Policy" Tab - Description
3.5.2 Defining the Application Profiles
3.6.1 Creating/Modifying Application Objects and Technical Definitions
3.7 Defining Window Objects
3.8 Testing the SSO
3.9 Exporting or Importing Objects
3.6.1.1 Creating a New Application Object or Technical Definition
3.6.1.2 Modifying an Application Object or Technical Definition Configuration
3.6.2 Filling-in the Application Properties Window
3.6.2.1 "Properties" Tab of an Application Object
3.6.2.2 "Properties" Tab of a Technical Definition Object
3.6.2.3 "Account Base" Tab of an Application Object
3.6.2.4 "Launcher" Tab
3.6.2.5 "Parameters" Tab
3.6.2.6 "Application Profile" Tab
3.6.3 Defining Advanced Access Rights
3.9.1 Exporting/Importing Objects using the Graphical Interface
3.9.2 Importing Objects using Command Line Arguments (without Controller)
3.10 Managing Objects in the Tree
3.10.1 Copying/Cutting/Pasting Objects
3.10.2 Renaming an Object
3.10.3 Deleting an Object from the Tree
3.11 Saving Object Configurations
3.11.1 Saving Object Configurations in LDAP Storage Mode (with Controller)
3.11.2 Saving Object Configurations in Local Storage Mode
3.12 Managing Configuration Updates
3.13 Refreshing the Tree
4.1 Window Detection
5 The Microsoft Internet Explorer Plugin
4.1.1 Simple Detection
4.1.2 Advanced Detection
4.2 User Interface
4.3 Generic Plug-in Actions
4.1.2.1 The Enable Variable URL Detection Option
4.1.2.2 The Look for Text Option
4.1.2.3 The Advanced Button
4.1.3 Restrictions
4.3.1 StandardLogin – Connection
4.4 Special Cases
4.3.1.1 Window Description
4.3.1.2 Specifying Additional Fields (Optional)
4.3.1.3 SSOWatch Behavior
4.3.2 BadPassword
4.3.3 NewPassword
4.3.4 ConfirmPassword
4.3.5 BadNewPassword
5.1 HTML/Internet Explorer Detection
5.2 User Interface
5.3 HTML/Internet Explorer Actions
6 The SAP R/3 Plug-in
6.1 SAPLogin and SAPExpired Window Types
6.2 Basic Principles of the SAP R/3 Plug-in
6.3 Configuration Guide
7 Terminal Type Applications
8 The HLLAPI Plug-in
8.1 Configuring the HLLAPI Plug-in
9 Advanced Configuration
8.1.1 Configuring the HLLAPI Plug-in for a Single Application
8.1.2 Configuring the HLLAPI Plug-in for Different Types of Applications
8.1.3 HLLAPI Plug-in Registry Keys
8.2 Enabling SSO for HLLAPI Applications
8.3 HLLAPI Applications Keys
9.1 Custom Scripts Plug-ins
9.2 Extension DLL
10 OLE/Automation Interface
10.1 Definition of SSOWatch OLE/Automation Interface
10.2 The ISSOEngine Interface
10.3 The ISSOApplication Interface
10.4 Code Example
10.5 Return Codes
Appendix A: Cache Tuning and Asynchronous Update of the Application Data
Appendix B: Integrating Care-FX with SSOWatch
3.11.1 Saving Object Configurations in LDAP Storage Mode (with Controller)
|
• |
In Enterprise SSO Studio (used in LDAP storage and with Controller), in the File menu, click Update directory. |
The LDAP directory is updated with the configurations defined in Enterprise SSO Studio.
3.11.2 Saving Object Configurations in Local Storage Mode
In local storage mode, the storage operation depends on the Enterprise SSO Studio version used:
|
• |
In Enterprise SSO Studio, you can save as many configurations as wanted: each configuration is saved in a file. |
|
• |
|
• |
3.12 Managing Configuration Updates
To optimize network traffic, you can use the update management feature: by default, the Quest ESSO workstations retrieve the whole SSO configuration periodically. The update management feature allows you to post an update, which generates a unique identifier. The workstations retrieve the application data and this identifier. As long as the identifier is unchanged between the directory and the cache of the workstations, the workstations do not update their SSO configurations.
The functionality described in this section is only available in Enterprise SSO Studio used in LDAP storage mode and without Controller.
|
• |
To enable the update management feature: In the File menu of Enterprise SSO Studio, select Manage Updates and click Disable Update Management. |
|
• |
To post an update, which generates a unique identifier: In the File menu of Enterprise SSO Studio, select Manage Updates and click Post an Update. |
 |
3.13 Refreshing the Tree
 |
This functionality is available only if you use Enterprise SSO Studio in LDAP storage mode.
|
• |