Netiq Securelogin User Guide About This Guide
Total Page:16
File Type:pdf, Size:1020Kb
User Guide SecureLogin 8.0 October, 2013 Legal Notice NetIQ Product Name is protected by United States Patent No(s): nnnnnnnn, nnnnnnnn, nnnnnnnn. THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON‐DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON‐DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ʺAS ISʺ WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU. For purposes of clarity, any module, adapter or other similar material (ʺModuleʺ) is licensed under the terms and conditions of the End User License Agreement for the applicable version of the NetIQ product or software to which it relates or interoperates with, and by accessing, copying or using a Module you agree to be bound by such terms. If you do not agree to the terms of the End User License Agreement you are not authorized to use, access or copy a Module and you must destroy all copies of the Module and contact NetIQ for further instructions. This document and the software described in this document may not be lent, sold, or given away without the prior written permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non‐disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data. This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time. U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202‐4 (for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non‐DOD acquisitions), the government’s rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the license agreement. © 2013 NetIQ Corporation and its affiliates. All Rights Reserved. For information about NetIQ trademarks, see https://www.netiq.com/company/legal/. Contents About This Guide 5 1 Overview 7 1.1 Management Utilities . 7 1.1.1 Administrative Manage Utilities . 7 1.1.2 The SecureLogin Client Utility . 9 2 Accessing the SecureLogin Client Utility 11 3 Automating Logging In to Applications 13 3.1 Responding to Pop-Up Prompts . 13 3.2 Predefined Application Definitions . 14 3.2.1 Windows Applications . 14 3.2.2 Web Applications . 15 3.3 Enabling an Application for Single Sign-On Using a Predefined Application Definition . 15 3.3.1 Enabling Single Sign-On for Novell WebAccess . 15 3.4 Using the Default Selections . 17 3.5 Using the SecureLogin Client Utility to Enable Applications for Single Sign-on. 18 3.6 Using a New Application Definition to Enable Applications for Single Sign-on . 19 3.7 Changing the Name of an Application Definition . .21 3.8 Modifying an Application Definition . 21 3.8.1 Modifying through the Application Definition Wizard . 21 3.8.2 Modifying through the Manage Logins Menu. 23 3.9 Deleting an Application Definition . 25 4 Creating Login Credentials 27 4.1 Creating Login Credentials Using the Add New Login wizard . 27 4.1.1 Creating the Login . 27 4.1.2 Specifying the Credentials . 28 4.1.3 Linking a Login to an Application . 28 4.1.4 Delinking a Login from an Application . 28 4.2 Adding Multiple Logins . 28 4.2.1 Prerequisites . 29 4.2.2 Creating Another Login . 29 4.2.3 Viewing the Additional Login . .30 4.2.4 Testing the Multiple Logins . 30 5 Changing Preferences 31 5.1 Viewing and Changing the Preferences. 31 5.2 General Preference, Definitions, and Values . 32 5.3 Java Preference, Definitions, and Values . 34 5.4 Web Preferences, Definitions, and Values. 35 5.5 Windows Preferences, Definitions, and Values . .36 Contents 3 6 Managing Your Passwords 39 6.1 Creating a Password Policy . 39 6.2 Editing a Password Policy . 43 6.3 Deleting a Password Policy . 44 7 Managing Information Cache 45 7.1 Refreshing the Cache . 45 7.2 Backing Up User Information . 46 7.3 Restoring User Information . 47 7.3.1 Deleting the Workstation Cache . 47 7.3.2 Restoring the Backup File . 48 7.4 Working Online and Working Offline . 49 8 Managing the Passphrase 51 8.1 Creating a Passphrase. 51 8.2 Changing a Passphrase. 53 4 NetIQ SecureLogin User Guide About This Guide This document contains information on the following: Chapter 1, “Overview,” on page 7 Chapter 2, “Accessing the SecureLogin Client Utility,” on page 11 Chapter 3, “A u t o m a t i n g Logging In to Applications,” on page 13 Chapter 4, “Creating Login Credentials,” on page 27 Chapter 5, “Changing Preferences,” on page 31 Chapter 6, “Managing Your Passwords,” on page 39 Chapter 7, “Managing Information Cache,” on page 45 Chapter 8, “Managing the Passphrase,” on page 51 Additional Documentation The other documents available with this release of SecureLogin are: Getting Started NetIQ Secure Login Quick Start Guide NetIQ SecureLogin Readme NetIQ SecureLogin Overview Guide Installation NetIQ SecureLogin Installation Guide Administration NetIQ SecureLogin Administration Guide NetIQ SecureLogin Application Definition Wizard Administration Guide NetIQ SecureLogin Citrix and Terminal Services Guide pcProx Guide Reference NetIQ SecureLogin Application Definition Guide About This Guide 5 Contacting Sales Support For questions about products, pricing, and capabilities, contact your local partner. If you cannot contact your partner, contact our Sales Support team. Worldwide: www.netiq.com/about_netiq/officelocations.asp United States and Canada: 1-888-323-6768 Email: [email protected] Web Site: www.netiq.com Contacting Technical Support For specific product issues, contact our Technical Support team. Worldwide: www.netiq.com/support/contactinfo.asp North and South America: 1-713-418-5555 Europe, Middle East, and Africa: +353 (0) 91-782 677 Email: [email protected] Web Site: www.netiq.com/support Contacting Documentation Support Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, click Add Comment at the bottom of any page in the HTML versions of the documentation posted at www.netiq.com/documentation. You can also email Documentation‐ [email protected]. We value your input and look forward to hearing from you. Contacting the Online User Community Qmunity, the NetIQ online community, is a collaborative network connecting you to your peers and NetIQ experts. By providing more immediate information, useful links to helpful resources, and access to NetIQ experts, Qmunity helps ensure you are mastering the knowledge you need to realize the full potential of IT investments upon which you rely. For more information, visit http:// community.netiq.com. 6 NetIQ SecureLogin User Guide 1 1Overview SecureLogin is a Single Sign‐on (SSO) product. It eliminates the necessity for users to remember multiple usernames and passwords. It stores usernames and passwords and automatically retrieves them for users when required. SecureLogin consists of multiple, integrated security systems that provide authentication and single sign‐on to networks and applications. SecureLogin has wizards, an iManager plug‐in, and tools that make it easy to centrally configure for use on the corporate network. It supports usernames, passwords, and multi‐factor authentication such as smart cards, tokens, or biometrics at the network and application levels. In this document, we take a menu‐oriented approach in explaining how to use the SecureLogin Client Utility to customize SecureLogin to your preferences and requirements. 1.1 Management Utilities SecureLogin has two management utilities: Section 1.1.1, “Administrative Manage Utilities,” on page 7 Section 1.1.2, “The SecureLogin Client Utility,” on page 9 1.1.1 Administrative Manage Utilities Administrators use the Administrative Management utilities: iManager SSO plug‐in, SecureLogin Manager, and Active Directory Computer Users and Snap Ins to define the settings and preferences of SecureLogin for use by the end users. Overview 7 Figure 1-1 iManager: One of the Administrative Management Utilities 8 NetIQ SecureLogin User Guide Figure 1-2 The SecureLogin Management 1.1.2 The SecureLogin Client Utility You can use the SecureLogin Client Utility to customize the SecureLogin to suit your requirements. For example, you can set your own passphrase question and answer, and set your own password policies. Overview 9 Figure 1-3 The SecureLogin Client Utility 10 NetIQ SecureLogin User Guide 2 2Accessing the SecureLogin Client Utility The SecureLogin Client Utility is represented by an icon in the notification area (system tray). To launch SecureLogin: 1 Click Start > Programs > SecureLogin. After you successfully launch the SecureLogin, the appears in the notification area. Double‐click this icon to launch the SecureLogin Client Utility.