9.1 Enabling Applications for Single Sign-On

Novell SecureLogin has the following features:

Before SecureLogin can enable an application for single sign-on for a particular user, it must learn the user’s application credentials so that SecureLogin can encrypt and store them for future logins, unless it is used in conjunction with Identity Management solutions such as Novell Identity Manager.

When a user starts an application for the first time after the application was enabled for single sign-on, SecureLogin prompts the user for application credentials, and then encrypts and stores them in the directory against the user object. The credentials are passed automatically to the application for subsequent logins.

Automated single sign-on is achieved by using proprietary application definitions. Application definitions are managed in directory environments through SecureLogin management utilities, including the Administrative Management utility, iManager plug-in, and Active Directory MMC plug-in. Locally and in standalone deployments, application definitions are managed in the Novell SecureLogin Client Utility or distributed by using the advanced offline signed and encrypted method.

You can create application definitions with the Novell SecureLogin application definition wizard. Single sign-on enabled application definitions may also be created, modified or deleted in the Applications pane of the management utilities. Regardless of the origin of the application definition, when an application is enabled single sign-on for, it is added to and maintained in the Applications Properties Table.