Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How does Access Manager perform SSO, desktop SSO, and WAM?

April 26, 2017desktop manager perform SSO wam

0

Posted

How does Access Manager perform SSO, desktop SSO, and WAM?

1 Answer

0

Posted

Access Manager enables Web SSO, desktop SSO, and federated SSO (Liberty Alliance), and SAML. You establish SSO in Access Manager by enforcing agent-based or proxy-based policies that match your security requirements evaluated on Access Manager’s server environment and hosted on standard platform components, such as LDAP directories and Web or application servers. Access Manager Policy Agents enforce access policies so that users can log in to only those systems, URLs, or objects they are authorized to access. For example, with Windows Desktop SSO, a Kerberos-based authentication plug-in module for Windows 2000, users who are authenticated with a key distribution center present the Kerberos tokens to Access Manager through the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) protocol. Those users are then authenticated by Access Manager without having to log in again. To implement Kerberos-based SSO in Access Manager through this authentication module, the client must use SPN