aXsGUARD Gatekeeper Single Sign-On Utility (SSO) - Vasco

aXsGUARD Gatekeeper Single Sign-On Utility (SSO) How To v1.6 Concept and Features
2.5 Installation Modes
2.5.1 Domain Mode
The SSO Authentication Utility can be installed using the following modes:
The Windows Domain Mode: Only applies to Windows clients.
The Workgroup Mode: Applies to Windows and Linux clients.
The aXsGUARD Gatekeeper SSO Authentication Utility is designed to be integrated with a Microsoft Windows
Domain. aXsGUARD Gatekeeper Firewall and Web Access rights are granted based on the provided Windows
Domain (AD) credentials. The user is automatically authenticated with the aXsGUARD Gatekeeper after
successfully logging on to the Domain. The Windows Domain has to be be listed in the aXsGUARD
Gatekeeper's allowed domains (see section 3.2). The Domain Mode can only be used on Windows clients.
Note
2.5.2 Workgroup Mode
In Domain Mode, the aXsGUARD Gatekeeper user name has to be identical to the Active
Directory user name.
The aXsGUARD Gatekeeper SSO Authentication Utility can also be used without a Microsoft Domain on
Windows and Linux clients. This is referred to as Workgroup Mode. The SSO Utility allows you to create
multiple profiles for different users and / or locations. You can set a default user profile, which is automatically
activated after logging on to the PC. The Workgroup Mode offers several possibilities:
You can store the user credentials in a user profile: The aXsGUARD Gatekeeper user credentials are
stored locally on the PC.
Enforce Password Authentication: If you company policy prevents you from storing passwords locally, you
can leave the password field blank. As a result, the user is required to authenticate after logging on to
Windows (see section).
Enforce VASCO Digipass Authentication: Rather than using a regular password as explained above, it is
much more secure to use a One-Time Password (OTP) generated by a DIGIPASS. For more information
about Digipass Authentication, consult the aXsGUARD Gatekeeper Authentication How To, which can be
accessed by clicking on the permanently available Documentation button.
Caution
Do not store the password in a user profile when using Digipass Authentication.
© 2009 - VASCO Data Security 13