CA Workload Automation iXp User Guide - CA Technologies

Security3) Once it receives the contents, the iXp Server sends the contents backto the requesting iXp Client. The iXp Client displays the contents in abrowser window.2.2 SecurityThere are two security methods available for controlling access to iXp.1) Native iXp security2) Single-Sign On (SSO)iXp provides a native multi-layered security model that encompasses dataencryption, user authorization, and optional user authentication. The samesecurity model is applied to both the iXp GUI and the iXp CLI.In the first model, user access to iXp requires validation of the user identity andpassword. All user identities and passwords are managed within iXp and have norelation to system/domain IDs and passwords.In the second model, iXp leverages the user ID already authenticated to theActive Directory Domain or the local machine. This requires no user/passwordmaintenance in iXp.In either case, iXp security includes the following features.‣ Data transmission between the server and client machines can besecured and encrypted through current secure HTTP technology. Also,the sensitive data stored by iXp is encrypted.‣ Roles can be assigned to the iXp user identities that provide read, updateand control privileges on the desired CA Workload Automation AEobjects.‣ The security model is very dynamic and user policies can be changed onthe fly. Changes immediately take effect and a user logout is not required.‣ The iXp Administrator can easily manage the security role policiesthrough the iXp Admin Tool.ARCHITECTURE 11