SecureLogin supports single sign-on for web applications using Internet Explorer, Mozilla Firefox, and Google Chrome browsers. To enable single sign-on for web applications in Mozilla Firefox and Google Chrome, you must install the Single Sign-on Assistant extension or NetIQ Securelogin SSO Extension in the respective browser.
Single Sign-on Assistant provides a secure single sign-on experience for Access Manager, CloudAccess and SecureLogin users by allowing automatic authentication for configured applications. NetIQ recommends that you use Single Sign-on Assistant instead of NetIQ SecureLogin SSO Extension.
IMPORTANT:The Single Sign-on Assistant extension is supported from SecureLogin 8.5.3 and above. You must remove the NetIQ SecureLogin SSO Extension from your browser before installing Single Sign-on Assistant extension.
Download and install the required SecureLogin browser extension for Google Chrome and Mozilla Firefox using the following information:
If NetIQ SecureLogin SSO Extension is installed, perform Step 2. Otherwise, continue from Step 3.
Perform the following steps in the Google Chrome browser to remove NetIQ SecureLogin SSO Extension:
Click More Tools > Extensions.
Locate NetIQ SecureLogin SSO Extension.
Click the delete icon to remove NetIQ SecureLogin SSO Extension.
In the Google Chrome browser, click More Tools > Extensions > Get more extensions.
Specify Single Sign-on Assistant in the search field.
Locate and click Single Sign-on Assistant in search results.
Click ADD TO CHROME.
Click Add extension.
To perform auto update in the chrome browser, click Settings > Extensions > Update extensions now to force update the extension manually.
You can install the Single Sign-on Assistant extension from both Microsoft store and Chrome web store. However, you must apply the appropriate settings in SecureLogin. In the Preferences > Web page, you must ensure that Microsoft Edge settings are applied when the extension is installed from Microsoft store, and Google Chrome settings are applied when installed from the Chrome web store.
NOTE:When you install Single Sign-on Assistant in Microsoft Edge from the Chrome web store, applying the preferences of Microsoft Edge will not work. You must apply the preferences of Google Chrome.
Perform the following steps to install Single Sign-on Assistant:
In Microsoft Edge, click Extensions > Get extensions for Microsoft Edge.
Specify Single Sign-on Assistant in the Search field.
Locate and click Single Sign-on Assistant in the search results.
Click Get > Add extension to start installation.
Restart Edge.
In Microsoft Edge, click Settings and more > Extensions > Explore more extensions.
Specify Single Sign-on Assistant in the Search field.
Locate and click Single Sign-on Assistant in the search results.
Click Get to start installation.
When the installation is complete, click Launch to switch back to Edge.
Read the notification about what the extension is allowed to do, and select Turn it on.
Restart Edge.
NOTE:Single Sign-on Assistant is supported in Mozilla Firefox version 50 and above.
If NetIQ SecureLogin SSO Extension is installed, perform Step 2. Otherwise, continue from Step 3.
Perform the following steps in the Mozilla Firefox browser to remove NetIQ SecureLogin SSO Extension:
Click Add-ons > Extensions.
Locate NetIQ SecureLogin SSO Extension.
Click Remove to remove NetIQ SecureLogin SSO Extension.
In the Mozilla Firefox browser, click Add-ons > Extensions.
Specify Single Sign-on Assistant in the Search all add-ons field.
Locate Single Sign-on Assistant in the search results and click Install.
Click Accept and Install... in the End-User License Agreement window.
Click Add when the Mozilla Firefox browser prompts to add Single Sign-on Assistant extension.
Click OK.
For accessing applications that are local to your system, after installing the extension select Allow access to file URLs under the Single sign-on Assistant. This allows SecureLogin to login and fill the form for local files such as file:///C:/dev/test.html.
In the Google Chrome browser, click Settings > Extensions > Get more extensions.
Specify NetIQ Securelogin SSO Extension in the search field.
Click NetIQ Securelogin SSO Extension and follow the on-screen prompts.
If you already have an older version of NetIQ Securelogin SSO Extension installed, it is recommended to install the Single Sign-on Assistant plug-in.
NOTE:NetIQ SecureLogin SSO Extension is supported only in Mozilla Firefox version 50 and above.
Download NetIQ Securelogin SSO Extension for Mozilla Firefox from the NetIQ Product download site.
In the product download site, select the product as SecureLogin and the version as SecureLogin 8.5, then click Submit Query.
From the search result click NetIQ SecureLogin 8.5.
In the NetIQ SecureLogin 8.5 page, click proceed to download and follow the on-screen prompts to download the extension.
In the Mozilla Firefox browser, click Add-ons > Extensions.
Drag and drop the downloaded NetIQ Securelogin SSO Extension to the Extensions page of Mozilla Firefox.
NOTE:If you download the extension using Google Chrome, the extension is downloaded as a .zip file. You must drag and drop the complete zip file to install the extension in Mozilla Firefox.
Click Install in the pop-up dialog box.
For accessing applications that are local to your system, after installing the extension select Allow access to file URLs under the NetIQ SecureLogin SSO Extension. This allows SecureLogin to login and fill the form for local files such as file:///C:/dev/test.html.
IMPORTANT:HTML Basic Authentication does not process the message box command of SecureLogin in Mozilla Firefox. The message box command is processed only when the user interacts with the HTML page.
SecureLogin supports HTML Basic Authentication when using Single Sign-on Assistant 3.3 with Google Chrome and Mozilla Firefox. It provides authentication in the following three scenarios.
Default: This scenario does not require a single sign-on script. It creates the credential set for the respective authentication prompts and saves the credentials for the subsequent single sign-on operations to provide seamless sign-on. It uses the following format for the credential set.
Domain "Realm"
Using the Single Sign-on Scripts: Perform the following steps to write your own single sign-on script or application definitions to enable HTML Basic Authentication.
Right click on the SecureLogin system tray icon and click Manage.
In SecureLogin, right click on Applications and click New.
In New Application, select New Application Definition.
In Type, select Generic.
In Name, specify CredentialSelection.
Click OK.
Navigate to Applications > Generic > CredentialSelection.
Specify your application definitions in Definition. The following is a sample application definition.
if "abc.xyz.123.com" -in ?domain debugprint "Setting credential to domain credentials" Set ?Credential apptest-correct else Set ?Credential apptest-wrong endif
NOTE:If there are multiple HTML Basic Authentication requests, you can use the same CredentialSelection type with a custom definition for each URL.
Using the System Credentials: Seamless sign-on to authentication prompts is achieved when user logs into Windows. The following is a sample application definition.
if "abc.xyz.123.com" -in ?domain set ?Credential "-SYSCREDENTIAL" endif