53
support.evidian.com 39 A2 04MB 01 ENTERPRISE ACCESS MANAGEMENT Enterprise SSO as a Service User’s Guide for Windows May 2019

Enterprise SSO as a Service - User Guide for Windows

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Enterprise SSO as a Service - User Guide for Windows

sup

ENTERPRISE ACCESS MANAGEMENT

Enterprise SSO as a Service User’s Guide for Windows

port.evidian.com

39 A2 04MB 01May 2019

Page 2: Enterprise SSO as a Service - User Guide for Windows

Copyright © Evidian, 2019 - 2019

The trademarks mentioned in this document are the property of their respective owners. Evidian, AccessMaster, SafeKit, OpenMaster, SSOWatch, WiseGuard, Enatel, CertiPass and QRentry are all registered trademarks and are the sole property of Evidian.

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical or otherwise without the prior written permission of the publisher.

Evidian disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties except as may be stated in its written agreement with and for its customer. In no event is Evidian liable to anyone for any indirect, special, or consequential damages.

Consult your Evidian Marketing Representative for product or service availability.

Page 3: Enterprise SSO as a Service - User Guide for Windows

39 A2 04MB 01 iii

Preface

Subject This guide describes how to use the as a Service Single Sign-On (SSO) engine on Windows.

Audience This guide is intended for:• Administrators.• End-users

Required Software

Enterprise SSO 10.0evolution 1 and later versions.For more information about the versions of the required operating systems and software solutions quoted in this guide, please refer to Evidian EAM Release Notes.

Typographical Conventions

This guide uses the following conventions:

Documentation support

The information contained in this document is subject to change without notice. As our products are continuously enhanced, certain pieces of information in this guide can be incorrect. Send us your comments or improvement suggestions regarding the documentation via an Issue on the Evidian support website:https://support.evidian.com/

Bold Indicates:• Interface objects, such as menu names, buttons, icons

and labels.• File, folder and path names.• Keywords to which particular attention must be paid.

Italics Indicates references to other guides.

Monospace Indicates portions of program codes, command lines or messages displayed in command windows.

CAPITALIZATION Indicates specific objects within the application (in addition to standard capitalization rules).

< > Identifies parameters to be supplied by the user.

Notes contain additional information such as comment or clarification on the subject.

Important tags contain warnings or cautions to prevent data loss and essential information to complete the task.

Page 4: Enterprise SSO as a Service - User Guide for Windows

iv 39 A2 04MB 01

Page 5: Enterprise SSO as a Service - User Guide for Windows

Contents

Preface .................................................................................................................. iii

1. Overview.......................................................................................................... 1

1.1 Overview......................................................................................................................... 1

1.2 The SSO Engine............................................................................................................. 1

2. Creating an E-SSO Account .......................................................................... 3

3. Enterprise SSO Interface ............................................................................... 7

3.1 Enterprise SSO Icon....................................................................................................... 7

3.2 Enterprise SSO Pop-up Menu ........................................................................................ 7

3.3 The Main Window........................................................................................................... 9

3.3.1 The Home window............................................................................................ 9

3.3.2 The Account window ........................................................................................ 10

3.3.3 The Notes window............................................................................................ 11

3.3.4 The Audit window............................................................................................. 11

3.3.5 The Options window......................................................................................... 12

4. Managing States ............................................................................................. 15

4.1 Starting ........................................................................................................................... 15

4.1.1 Password Authentication.................................................................................. 15

4.1.2 OTP Authentication .......................................................................................... 17

4.1.3 Preventing/Reactivating the Start..................................................................... 18

4.2 Suspending/Activating .................................................................................................... 18

4.3 Exiting............................................................................................................................. 19

5. Managing Accounts........................................................................................ 21

5.1 Filling-in your Accounts when launching an Application for the first time ....................... 21

39 A2 04MB 01 v

Page 6: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

5.2 Displaying your Accounts ............................................................................................... 22

5.3 Displaying the Properties of an Account......................................................................... 23

5.4 Changing the Login Name and/or Password of an Account........................................... 25

5.5 Updating the Password of an Account upon Application Request ................................. 25

5.6 Creating a New Account for an Application .................................................................... 26

5.7 Revealing the Account Password................................................................................... 28

5.8 Delegating an Account ................................................................................................... 29

5.8.1 Delegating an Account With the Wizard........................................................... 29

5.8.2 Delegating an Account Manually...................................................................... 32

5.8.3 Removing an Account Delegation.................................................................... 33

5.9 Deleting an account........................................................................................................ 34

6. Managing your Applications.......................................................................... 35

6.1 Starting an Application.................................................................................................... 35

6.2 Creating a Shortcut for an Application............................................................................ 35

6.3 Creating a Favorite for an Application ............................................................................ 36

6.4 Disabling/Enabling SSO for Applications........................................................................ 36

6.4.1 Disabling SSO for an Application ..................................................................... 37

6.4.2 Enabling SSO for an Application...................................................................... 37

6.5 Testing the SSO Configuration of an Application (advanced configuration)................... 37

7. Managing notes .............................................................................................. 39

8. Managing your Profile.................................................................................... 41

8.1 Modifying your Information ............................................................................................. 41

8.2 Changing your Password ............................................................................................... 42

8.3 Deleting your Account .................................................................................................... 43

9. Managing your Devices ................................................................................. 45

vi 39 A2 04MB 01

Page 7: Enterprise SSO as a Service - User Guide for Windows

1. Overview

1.1 Overview

Single Sign-On (SSO) enables you to log on only once for the whole duration of your session, regardless of the number of applications requiring authentication. You can thus access you data transparently, without having to reauthenticate.

1.2 The SSO Engine

The SSO Engine contains the following modules:

• Enterprise SSO: you can activate, suspend or update the E-SSO configuration.

• The accounts: you can visualize or update you accounts.

• The notes: you can create and store personal notes containing Wi-Fi, license keys or other passwords regarding personal applications.

• The audit events: you can check your history.

• The options enabling you to manage the display of certain elements (format, zoom and sorting) in the SSO engine as well as your personal data and access points.

39 A2 04MB 01 1

Page 8: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

2 39 A2 04MB 01

Page 9: Enterprise SSO as a Service - User Guide for Windows

2. Creating an E-SSO Account

Subject To access the E-SSO service, you must own a corresponding account.

Before starting Check that your Windows connection parameters (Internet Explorer/Edge) are properly configured: you must be connected to the Internet.

Procedure

1. Click the Enterprise SSO icon.

► The following window appears.

2. Enter your E-mail address (if not displayed by E-SSO) and click .

► A confirmation code is sent to the email address provided for validation.

39 A2 04MB 01 3

Page 10: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

3. Enter the OTP you received and click .

► The registration form appears.

4. Enter your first name, last name and cell phone (optional), then click Next.

The email address must be valid, accessible and not already used.

4 39 A2 04MB 01

Page 11: Enterprise SSO as a Service - User Guide for Windows

Creating an E-SSO Account

► Depending on the configuration (password or OTP authentication), the password creation window appears.

5. Enter and confirm your password by following the imposed policy, then click Next.

► Your account has been created, you can now authenticate to access E-SSO (see Section 4.1, "Starting").

39 A2 04MB 01 5

Page 12: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

6 39 A2 04MB 01

Page 13: Enterprise SSO as a Service - User Guide for Windows

3. Enterprise SSO Interface

This section gives an overview of the Enterprise SSO interface.

3.1 Enterprise SSO Icon

The Enterprise SSO icon is displayed in the Windows notification area.

Depending on the Enterprise SSO state, this icon can have different colors:

3.2 Enterprise SSO Pop-up Menu

The Enterprise SSO pop-up menu appears when you right-click the Enterprise SSO icon. It enables you to control Enterprise SSO:

Icons DescriptionEnterprise SSO is activated: the SSO feature is enabled (whenever it detects a configured window, Enterprise SSO automatically sends your account).Enterprise SSO is suspended: the SSO feature is disabled.

Enterprise SSO is locked: when the Enterprise SSO detects a configured application login window, or when you want to display the user accounts associated with applications (see Section 5.2, "Displaying your Accounts"), Enterprise SSO asks you to reauthenticate. Upon a successful authentication, Enterprise SSO becomes active.

39 A2 04MB 01 7

Page 14: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Depending on your Enterprise SSO configuration, some menu commands may not appear, as detailed in the following table.

The following table describes the Enterprise SSO pop-up menu.

Menu Command DescriptionAbout Enterprise SSO

Displays the Enterprise SSO version.

Managing Cloud users Enables to display and delete Cloud E-SSO users enrolled on this workstation. You can also export the list of enrolled users in a TXT file. This feature requires specific administration rights.

Account delegation Enables you to delegate one or several of your accounts to one or several users of your choice during a specific length of time.

Open Enterprise SSO Studio

Opens the SSO Account panel; which allows you to manage your user accounts.

Note: this menu command is bold, which means that this is a default command: double-click the Enterprise SSO icon to run it.

Add application Starts Enterprise SSO Wizard, which is the easiest way to set up your personal Enterprise SSO configuration. For an example of how to use the Enterprise SSO Wizard, see Evidian EAM in a Nutshell.

Open Personal SSO Studio

Starts Personal SSO Studio, the editor tool of your personal Enterprise SSO configuration, if you own the required rights. For details on how to use Enterprise SSO Studio, see Enterprise SSO Administrator's Guide.

Suspend, Activate Changes the states of Enterprise SSO.

Note: depending on your configuration, this menu command may not be displayed.

8 39 A2 04MB 01

Page 15: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO Interface

3.3 The Main Window

The main screen appears when you click Open in the pop-up menu, or just by clicking the Enterprise SSO icon. It is composed of the following windows:

Depending on the rights you own, the Home, Note, Audit and Options buttons can be hidden.

3.3.1 The Home window

From the Home window, you can perform the following tasks:

• Manage the states of Enterprise SSO (Area 1), as described in the following sections:

- Section 4.2, "Suspending/Activating".

- Section 4.3, "Exiting".

• If you are using several accounts for a same application, select the Current role (Area 2) that will be valid only for the current Windows session and/or until Enterprise SSO is reinitialized.

Refresh Forces the Enterprise SSO configuration update.Exit Enterprise SSO Closes Enterprise SSO.

Note: depending on your configuration, this menu command may not be displayed.

Menu Command Description

Button DescriptionThe Home window.

The Account window. By default, this window is displayed first when you open the E-SSO engine.

The Notes window.

The Audit window.

The Options window.

39 A2 04MB 01 9

Page 16: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

• If you have added applications to your favorites, they appear in the Home window (Area 3). The favorites list enables you to gather your most used applications and therefore to launch them quicker. To create favorites, see Section 6.3, "Creating a Favorite for an Application".

3.3.2 The Account window

When you open the Enterprise SSO window, the Account window appears. It lists your user accounts managed by Enterprise SSO. From this window, you can modify several account parameters, as described in Section 5., "Managing Accounts".

10 39 A2 04MB 01

Page 17: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO Interface

3.3.3 The Notes window

From the Notes window, you can create, modify or delete your notes, as described in Section 7., "Managing notes".

3.3.4 The Audit window

The Audit window enables you to view your audit events by day, week or up until the last month, on this workstation only or on all stations where you have authenticated.

This feature requires a network access.

The blue icons represent authentication events and the orange icons represent SSO events. Double-click an event to view the details.

39 A2 04MB 01 11

Page 18: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

3.3.5 The Options window

The Options window enables you to:

• Modify:

- The display format of the applications in the Account window.

- The zoom factor in all the other windows (you can also modify the zoom with the Ctrl key of the keyboard and the scroll wheel of the mouse).

- The sort order of applications in the Account window (the sort by popularity first displays the favorite applications, then the most used and finally the other applications by alphabetical order).

• Manage your authentication means. You can:

- Modify you personal data (last name, first name, cell phone and password) or delete your account.

- Manage your access points.

For more information, refer to Section 8., "Managing your Profile".

12 39 A2 04MB 01

Page 19: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO Interface

39 A2 04MB 01 13

Page 20: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

14 39 A2 04MB 01

Page 21: Enterprise SSO as a Service - User Guide for Windows

4. Managing States

This section describes how to start and exit Enterprise SSO.

4.1 Starting

Subject Enterprise SSO starts automatically when you open your Windows session. You must start if manually if the E-SSO cache has been deleted.

Before starting • To use E-SSO, you must own an E-SSO account. If it is not the case, when starting E-SSO, click the I want to register link and go to Section 2., "Creating an E-SSO Account".

• At E-SSO start, if the server was not provided during installation, you must make a request to your administrator.

4.1.1 Password Authentication

Procedure

1. To start E-SSO manually, click the Enterprise SSO icon ( ).

► The following window appears.

39 A2 04MB 01 15

Page 22: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

2. Enter your E-mail address and click .

3. Enter your password to authenticate.

If you have forgotten your password, click I have forgotten my password.

4. If the server is not reachable, click the Servers button to check or change the server.

► The Enterprise SSO window appears.

16 39 A2 04MB 01

Page 23: Enterprise SSO as a Service - User Guide for Windows

Managing States

4.1.2 OTP Authentication

Procedure

1. To start E-SSO manually, click the Enterprise SSO icon ( ).

► The following window appears.

2. Enter your E-mail address and click .

3. Enter the OTP you received or select a mobile device to authenticate with QRentry.

When you reauthenticate and depending on the policy in place, you can use other Windows authentication methods (biometrics, personal code, etc).

39 A2 04MB 01 17

Page 24: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

4. If the server is not reachable, click the Servers button to check or change the server.

► The Enterprise SSO window appears.

4.1.3 Preventing/Reactivating the Start

• If you do not want to use Enterprise SSO, select the Don’t display dialog again check box in the authentication window. This window will no longer be displayed.

• If you want to reactivate the display of the Enterprise SSO authentication window, press the left Shift key when starting Enterprise SSO. This window reappears. You must authenticate to permanently reactivate its display.

4.2 Suspending/Activating

Procedure• To suspend Enterprise SSO, right-click the Enterprise SSO icon and select

Suspend.

► The Enterprise SSO icon state changes, as described in Section 3.3, "The Main Window". White it is suspended, no SSO is performed.

• To resume Enterprise SSO, right-click the Enterprise SSO icon and select Activate.

► The Enterprise SSO icon state changes, as described in Section 3.1, "Enterprise SSO Icon". The SSO feature is enabled.

Depending on your configuration, this menu command may not be available.

18 39 A2 04MB 01

Page 25: Enterprise SSO as a Service - User Guide for Windows

Managing States

4.3 Exiting

Procedure• To exit Enterprise SSO, right-click the Enterprise SSO icon and select Exit

Enterprise SSO.

► The Enterprise SSO icon disappears. The SSO feature is disabled.

Depending on your configuration, this menu command may not be available.

39 A2 04MB 01 19

Page 26: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

20 39 A2 04MB 01

Page 27: Enterprise SSO as a Service - User Guide for Windows

5. Managing Accounts

This section describes how to manage your Enterprise SSO accounts.

5.1 Filling-in your Accounts when launching an Application for the first time

At the first launch of an SSO enabled application, when the application requests the user’s authentication, the Enterprise SSO collect window appears in the foreground (the application is temporarily unavailable) and requests the user name and password for the application.

Simply provide your user name for this application, your password (and confirm it to avoid mistype errors), and validate by clicking the OK button.This data will be stored in a secure way by Enterprise SSO so that it can reuse it afterwards, without requesting any new data. Single Sign-On is now enabled for this application.

39 A2 04MB 01 21

Page 28: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Depending on your configuration:• The dialog box may not appear if you start another application

instance (without exiting the first one). In this case, exit all the application instances and restart the application.

• The following controls can be available:

• The Cancel button: if available, click this button to cancel the authentication data collection. You can then log on manually or exit the application.For more information on the actions of this button, see Enterprise SSO Administrator's Guide.

• The Disable SSO for this application check box. If you select this option and click OK, the authentication data collection execution is canceled until further notice for the application. To reactivate the collection, see Section 6.4, "Disabling/Enabling SSO for Applications".

5.2 Displaying your Accounts

Subject This section describes how to display the accounts that are defined in your configuration.

Procedure• To display the list of your Enterprise SSO accounts, double-click the

Enterprise SSO icon located in the Windows notification area.

► The Enterprise SSO window appears.

Window description

Depending on the configuration (see Section 3.3.5, "The Options window"), the Account window displays one line per user account. For each account, the following information is available:

22 39 A2 04MB 01

Page 29: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

5.3 Displaying the Properties of an Account

Procedure

In the Account panel, select the wanted account and click the button or

right-click the wanted account and click Properties.

► The following window appears:

Column Name DescriptionApplication Name of the application.Login Name Account login name. If you have not used this application yet, <not

registered> is displayed (the login name and password of the account have never been collected).

Note: by default, the applications for which you are not registered are hidden. To display them, right-click any application and clear the Hide applications without credential check box.

Account By default, Standard Account is displayed. If you are using several accounts for a same application, this column displays the name of the account. For more information, see Section 5.6, "Creating a New Account for an Application".

39 A2 04MB 01 23

Page 30: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Window description

The Information Tab

Depending on your account properties, you may be allowed to modify your user account security data. For more details, see Section 5.4, "Changing the Login Name and/or Password of an Account".

The Properties Tab

The Properties tab is a read-only tab. It displays the account properties and application properties available for the selected account.

The Delegation Tab

Depending on the configuration, the Delegation tab may not appear. It allows you to delegate your account to other users.

24 39 A2 04MB 01

Page 31: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

5.4 Changing the Login Name and/or Password of an Account

Restriction Depending on your Enterprise SSO configuration, this command may be disabled for some or all the listed accounts.

Procedure

1. In the Account window, select an account and click the button or

right-click the wanted account and click Change Password.

► The following window appears:

2. Modify the wanted fields and click OK.

► The modification is taken immediately into account.

You can also modify the login name and/or password of an account from the Account details window, which is described in Section 5.3, "Displaying the Properties of an Account".

5.5 Updating the Password of an Account upon Application Request

Subject When an SSO enabled application requests a password update, this request is intercepted by Enterprise SSO, which displays the Password Change window.

To check the password format to use, execute the following procedure:

39 A2 04MB 01 25

Page 32: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Procedure1. Click the Show Password Format Control Policy link.

► The following area appears:

2. Type in a new password (and confirm it to avoid mistype errors) and validate it by clicking the OK button.

► Enterprise SSO updates and stores the data in the security database, so that it can reuse afterwards, without requesting any new data.

5.6 Creating a New Account for an Application

Restriction Depending on your Enterprise SSO configuration, this command may be disabled for some or all the listed applications.

26 39 A2 04MB 01

Page 33: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

Procedure

1. In the Account window, select an application and click the button or

right-click the wanted account and click New account.

► The following window appears:

2. In the Account field, either type the name of a new account, or, if you want to use an additional account that you have already created, select it in the drop-down list.

3. Click OK.

► The new account appears in the Account window.

Going Further If you have several accounts for an application, the following window appears by default when Enterprise SSO detects the authentication window of the application:

39 A2 04MB 01 27

Page 34: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

This window allows you to select an account to log on to the application.

If you select:

• Disable SSO for this application: the SSO is disabled for the selected account for the current SSO session. For more information, see Section 6.4, "Disabling/Enabling SSO for Applications".

• Set current role: Enterprise SSO will always use the selected account and this window will no longer appear. To redisplay this window, in the Home window, select No selected role in the Current role drop-down list (see Section 3.3.1, "The Home window").

Depending on your configuration, you can also log on to the application with one of the accounts by double-clicking the desired account in the Enterprise SSO Window.

5.7 Revealing the Account Password

Restriction Depending on your Enterprise SSO configuration, this command may be disabled for some or all the listed accounts.

28 39 A2 04MB 01

Page 35: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

Procedure

1. In the Account window, select an account and click the button or

right-click the wanted account and click Show password.

► The EAM re-authentication window appears.

2. Log on using your E-SSO password, your Windows password or your OTP (depending on the configuration).

► The following window appears:

By clicking the Password field drop down list, you can see the history of the generated passwords.

3. Click Close.

5.8 Delegating an Account

Subject You can delegate one or several accounts by using the Wizard or by doing it manually.

Restriction Depending on the Enterprise SSO configuration, this command may be disabled for some or all the listed accounts.

5.8.1 Delegating an Account With the Wizard

Use the Account(s) Delegation Wizard to delegate one or several user accounts quickly and simply. To do so, follow this procedure.

39 A2 04MB 01 29

Page 36: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Procedure1. Right-click the Enterprise SSO icon.

► The Enterprise SSO pop-up menu appears.

2. Select Account delegation.

3. Re-authenticate if needed.

► The Account Delegation Wizard appears.

4. Click Next.

► The Account delegation window appears.

30 39 A2 04MB 01

Page 37: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

5. Select the account(s) you want to delegate by selecting the corresponding check box(es) or click the Select all button to select all the accounts.

6. Select a start and an expiration date and click the Next button.

► The User Selection window appears.

39 A2 04MB 01 31

Page 38: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

7. In the Username field, enter the name of the user or part of it and click the Search button.

► The list of users found is displayed.

8. Select the user(s) to whom you want to delegate the account by selecting the corresponding check box(es) and click the Next button.

► Your selected account(s) has/have been delegated to the selected user(s).

5.8.2 Delegating an Account Manually

Procedure

1. In the Account panel, select one or several accounts and click the

button or right-click the wanted account and click Delegate.

2. Re-authenticate if needed.

► The Account Delegation window appears.

32 39 A2 04MB 01

Page 39: Enterprise SSO as a Service - User Guide for Windows

Managing Accounts

3. In the User name field, type the name or a part of the user name and click Search.

► The list of users found is displayed.

4. Select the user to whom you want to delegate the account.

5. Select a start and an expiration date and click the Delegate button.

► The account is delegated to the selected user from the start date to the expiration date.

5.8.3 Removing an Account Delegation

Procedure1. Right-click the Enterprise SSO icon.

► The Enterprise SSO pop-up menu appears.

2. Select Account delegation.

► The Account Delegation Wizard appears.

3. Select Manage existing account delegations and click Next.

► The Account Delegation List window appears.

39 A2 04MB 01 33

Page 40: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

4. Select an account delegation and click the Remove button.

► The account is not delegated anymore.

5.9 Deleting an account

Subject This section describes how to delete one or more accounts associated with an application.

Procedure

1. In the Account panel, select an application and click the button or

right-click the wanted account and click Delete.

► A warning message appears.

2. Read this message carefully. If you agree, click YES.

► The account is deleted.

If many accounts are associated with an application, the account line will be deleted. If you delete the last account, <not registered> will be displayed instead of the login name.

34 39 A2 04MB 01

Page 41: Enterprise SSO as a Service - User Guide for Windows

6. Managing your Applications

6.1 Starting an Application

Subject To start an application from the:

• Account window, follow Procedure 1 hereunder.

• Home window, follow Procedure 2 hereunder. This option is available only if you have created application favorites (see Section 6.3, "Creating a Favorite for an Application").

Procedure 1In the Home window, double-click the wanted application or right-click the application and select Start Application.

► The application starts and Enterprise SSO performs SSO.

Procedure 2In the Home window, double-click the wanted application or right-click the application and select Start Application.

► The application starts and Enterprise SSO performs SSO.

6.2 Creating a Shortcut for an Application

Subject You can create shortcuts for applications from the Account window, as described in the following procedure.

39 A2 04MB 01 35

Page 42: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Procedure• In the Account window, right-click the wanted application and select

Create Shortcut.

► A shortcut for the selected application is created on your Windows desktop.

6.3 Creating a Favorite for an Application

Subject You can create up to 4 application favorites from the Account window, as described in the following procedure. These favorites are then visible in the Home window.

Favorites are saved locally on the station.

Procedure• In the Account window, right-click the wanted application and select Add

to favorites.

► A favorite for the selected application is created in the Home window.

To delete a favorite, repeat the procedure by clicking Remove from favorites.

6.4 Disabling/Enabling SSO for Applications

Subject By default, SSO is enabled for all the applications listed in the Enterprise SSO Account window.

You can disable SSO for an application for the current SSO session, as explained in the following procedure.

Depending on your configuration, the commands of the following procedure may be disabled.

36 39 A2 04MB 01

Page 43: Enterprise SSO as a Service - User Guide for Windows

Managing your Applications

6.4.1 Disabling SSO for an Application

Procedure• In the Account window, right-click the wanted application and select

Disable the application.

► The SSO is disabled for the application during the SSO session. At SSO Engine restart or reset, the SSO will be re-enabled.

6.4.2 Enabling SSO for an Application

Procedures• In the Account window, right-click the wanted application and select

Enable the application.

If you have several disabled applications and want to enable all of them at the same time, select Enable all applications.

6.5 Testing the SSO Configuration of an Application (advanced configuration)

Subject The Enterprise SSO engine includes a test tool, which allows you to check if an application is correctly configured. It tests the following elements:

• Main window or Web page detection.

• URL detection if applicable.

• Advanced detection parameters (variable URLs, Look for text option, list of constraints).

Before starting You have configured the Application Profile associated with the application to test: the test tool is launched by clicking Test application on the shortcut menu that appears when you right-click an application displayed in the Account panel.

39 A2 04MB 01 37

Page 44: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

Procedure1. In the Account panel, right-click the application to test and select Test

application.

2. Complete the window.

Additional Information

• The Window configuration information area displays by default information on the window selected in the drop-down list (window title and URL configuration if any). You can change this information by selecting another window using the target button. This feature is useful to check if an SSO configuration works with a new version of an application for example.

• When the main window detection succeeds, the Enterprise SSO engine does the following tests:- It checks the variable URLs and Look for text parameters if any. The

test stops at the first detected invalid parameter. You can bypass the test of these parameters by selecting the Bypass the advanced detection control check box.

- Then, it checks the list of constraints if any. The test does not stop, even if an error occurs.

- Finally, the engine tests the detection of the configured fields. The test stops at the first detected invalid field. If the field detection succeeds, you can select the Perform SSO check box. This immediately starts the real SSO process.

• The Export button allows you to save in a plain text file the information displayed in the Live report area.

38 39 A2 04MB 01

Page 45: Enterprise SSO as a Service - User Guide for Windows

7. Managing notes

Subject You can manage your notes from the Notes window, as described in the following procedure.

If you are using E-SSO for mobile devices and if you are authorized, your notes are automatically synchronized.

Procedure

1. In the Notes window, click .

► The following window appears:

If you are authorized and if you have already created notes with E-SSO for mobile devices and the configuration has been synchronized, these notes appear in the list.

2. Enter the Title and content of your note and click OK.

► The note is created and appears in the note list.

39 A2 04MB 01 39

Page 46: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

3. To:

- View/edit a note, select one and click .

Depending on the rights you own, a reauthentication may be required.

- Delete a note, select one and click .

40 39 A2 04MB 01

Page 47: Enterprise SSO as a Service - User Guide for Windows

8. Managing your Profile

8.1 Modifying your Information

Subject You can modify the following information:• Last name.• First name.• Cell phone number.

Procedure1. In the Options window, click Edit my profile.

► The following window appears:

2. Modify your information and click Apply.

A reauthentication may be required.

► Your modifications are taken into account.

3. Click Close.

39 A2 04MB 01 41

Page 48: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

42 39 A2 04MB 01

8.2 Changing your Password

Procedure1. In the Options window, click Edit my profile.

► The modification window appears.

2. Click Change password.

► The Change Secret window appears.

3. Enter your old password, then enter your new password and confirm it.

You can check the password format control policy to comply with it.

4. Click OK.

► Your modifications are taken into account.

5. Click Close.

Page 49: Enterprise SSO as a Service - User Guide for Windows

Managing your Profile

8.3 Deleting your Account

Subject You can delete your account, if your administrator has authorized you to do so.

Procedure1. In the Options window, click Edit my profile.

► The modification window appears.

2. Click Delete the account.

► A warning message appears to confirm that you want to delete your account.

3. Click Yes.

► Your account is deleted.

39 A2 04MB 01 43

Page 50: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

44 39 A2 04MB 01

Page 51: Enterprise SSO as a Service - User Guide for Windows

9. Managing your Devices

Subject Managing your devices enables you to:

• Add mobile devices where your SSO data is available.

• Delete your SSO data stored on the devices you connected to.

Procedure1. In the Options window, click Manage my access points.

► The access points management window appears.

2. To:

- Add a mobile device, click Add and follow the E-SSO for mobile devices enrollment wizard.

- Delete your SSO data from a device, select the device and click Disable.

39 A2 04MB 01 45

Page 52: Enterprise SSO as a Service - User Guide for Windows

Enterprise SSO as a Service User’s Guide for Windows

To display your disabled devices, select the Show disabled devices check box.

3. Click Close.

46 39 A2 04MB 01