SecureLogin SSO Technical Features

Comprehensive single sign-on

ActivIdentity SecureLogin SSO supports most commercial and proprietary Windows and Web applications, including:

Internet and Intranet Web and HTTP sites;
Citrix® support, including MetaFrame XP®, NFuse and Citrix Secure Gateway;
Microsoft® Terminal Server and Terminal Services client;
UNIX, AS/400 and mainframe applications;
Customized support for DOS applications;
Integrated with Novell® eDirectory™, NDS, Microsoft Active Directory®, Sun® iPlanet™ and other LDAP compliant directories;
Windows® 2000 and XP; and
Supports login, password change and expiration, and virtually all error conditions.

Powerful web support

SecureLogin SSO supports a wide range of web applications and pages giving you the power to quickly single sign on enable your Java™ or web logins.

Support for framed web pages makes it easy to login to complex framed websites.
Interact and respond to complex web forms or logins using powerful built-in wizards and the Application Definition Editor.
Powerful features to support Java applications and web pages. With SecureLogin SSO you have the ability to single sign-on into Java applications and Java applets. Full support is provided for AWT and Swing GUI components.

Comprehensive terminal emulator support

SecureLogin SSO provides full support for more than 150 mainframe, UNIX, ANSI and custom terminal emulators, including:

All popular 3270 and 5250 emulators from Eicon®, WRQ®, IBM®, NetManage®, JollyGiant, Pericom® and many more.
All popular telnet emulators from WRQ, IBM, Microsoft, Novell, Teraterm.
Most healthcare emulators, including HBO, Meditech, Lawson and 3M™.
Most ANSI and text based emulators.

Smart Card support

ActivIdentity SecureLogin SSO integrated with ActivIdentity’s ActivClient® smart card middleware provides advanced smart card options, including:

Utilize the security of smart cards for protection of user single sign on credentials by storing them on the smart card.
Protect the single sign on data store in the directory using strong two-factor user authentication and smart card-based PKI encryption.
Select the most up-to-date AES encryption techniques to protect user single sign on data.
Choose smart card PKI or smart card generated one-time passwords to authenticate to applicable single sign on enabled applications.

Security and remote access

SecureLogin SSO allows you to enforce a consistent password policy.

SecureLogin SSO provides the highest standard of security and protection with certified FIPS 140-2 compliant Microsoft Cryptographic API libraries for the encryption of sensitive user data.
Administrators can require end users to re-authentication to sensitive applications using strong authentication by integrating single sign on with ActivIdentity strong authentication solutions such as ActivClient and ActivIdentity NMAS™ Method.
In addition to smart card protection, SecureLogin SSO supports Entrust® Entelligence™ allowing user single sign on data to be protected using disk-based cryptographic credentials.
Full support for internal and external roaming users, with or without network access.
Provides SNMP alert support for application usage and error monitoring.
SecureLogin SSO supports Novell Audit engine for auditing of user single sign on activities.
Passphrase protection for sensitive user data prevents administrators from changing a network password and thereby gaining access to a user’s single sign on data.

Software distribution and administration

Full Microsoft Active Directory Application Mode (ADAM) support. SecureLogin SSO can be deployed and managed in an ADAM instance, eliminating the requirement to extend the corporate Active Directory schema.
MSI compliant and facilitates simple client distribution via standard tools such as Novell ZENworks®, SMS, IBM Tivoli® and CA™ Unicenter®.
Enhanced support for user configuration and copying settings across objects in directory environments. Administrators can transfer preferences, password policies and application definitions to other directory objects or users.
Supports corporate configuration – applications only need to be configured once for the entire organization.
Import/export functionality enables SecureLogin SSO configurations to be distributed across directory objects and directories providing unique and powerful mass deployment capabilities.
Users can securely backup their SSO configuration and credentials in an encrypted XML file with local workstation backup and restore functionality.
SecureLogin Attribute Provisioning tool (SLAP) leverages an organization’s provisioning system for rapid single sign on deployment. Administrators import user data including credentials and organizational settings in XML from third party applications into the SSO data store.

ActivIdentity SecureLogin SSO can be used with other ActivIdentity products if stronger methods of authentication are needed, such as smart cards, PKI, or one-time passwords. This functionality allows organizations to leverage the advanced authentication and credential management capabilities of ActivClient, ActivID™ Card Management System (CMS), and 4TRESS™ AAA Server for Remote Access.