Filter
Top Products
Note: If the Domain Controller is not available, administrators can use their local account.
When browsing for domain accounts from the Select Account(s) from list of domains, the PSA may ask for a user
name and password. The reason is the domain's security policy requires a trusted user account to connect to the
domain controller to retrieve the account list. A machine account (i.e. the PSA's) is not sufficient when the domain
is configured to protect enumeration of users and groups account information.
Single Sign-On (SSO)
Single Sign-On allows an administrator, using Internet Explorer, to access the PSA without prompting for an
account name and password. The PSA will request the browser to provide credentials given when the administrator
logged into the Windows workstation. The following scenarios could occur:
1. When an administrator is using Internet Explorer and the URL specified for the PSA is within the browser’s
local intranet zone, the browser will automatically send the credentials used to log into the Windows
workstation.
❍ If the credentials are successfully authenticated with a domain controller and the administrators are
also authorized to access the PSA's web interface, then the requested page will be served to the
browser. Administrators are authorized if their domain account is listed in the PSA Domain
Administrators list.
❍ If the credentials are not authenticated with a domain controller or the administrator's account is
not authorized to access the PSA, the PSA will prompt for another account name and password (see
Basic Authentication).
2. If the PSA administrator is using Internet Explorer but the URL used to access the PSA is not within the local
intranet, then the administrator will be prompted for account name and password. In this case, the security
prompt given to the administrator will have three fields and the information entered here will be encrypted
before being passed to the PSA (the screen shown is for Microsoft Windows NT 4.x; this screen might vary
depending on your operating system).
After the name, password, and domain or entered the process is as (1) above.
3. If the administrator is not using Internet Explorer the browser will use the ‘Basic Authentication’ protocol.
Basic Authentication