Nortel 3050 Command Reference Manual page 256

256 Command Reference
The SSO (Single Sign-On) Domains menu lets you configure domains for
which single-sign-on is allowed. The VPN Gateway will automatically log
in remote users to hosts in the specified domains, provided the required
credentials are identical with those entered at Portal login. The feature
supports web servers using HTTP-based authentication (basic or NTLM),
as well as FTP and SMB (Windows file share) file servers.
Auto-login takes place whenever the remote users tries to access a
password-protected web page or file server during the Portal session, for
example through the URL field, a link on the Portal's Home tab or any
other web link accessed during the session.
Note that the SSO domains feature supports automatic login to all servers
in the specified domain. For a more restricted approach – where access
to a server can be specified down to path level – use the iauto link
instead. The iauto link also supports form-based authentication (see Link
Configuration on
Configuration" (page
Table 88
SSO Domain Menu Options (/cfg/vpn/aaa/ssodomains)
Command Syntax and Usage
list
del
add <domain name or IP address> <basic mode>
Copyright © 2007 Nortel Networks
.
"/cfg/vpn <id> /linkset <id> /link <id> Link
341)).
Lists the currently configured SSO domains along with their
corresponding index numbers.
Removes the specified SSO domain from the configuration by index
number. Use the list command to display the index numbers of all
added SSO domains.
Adds an SSO domain name or IP address to the configuration.
•
Domain name or IP address. Enter the domain name, e.g.
example.com. This will allow single sign-on to all servers
matching the specified domain suffix, e.g. to www.example.com or
test.lab.example.com.
As an alternative, an IP address can be entered, e.g. 10.1.0.10,
to limit single sign-on to a specific server.
•
Basic mode. Lets you select the desired mode for basic,
HTTP-based authentication (popup window with user name and
password fields). This setting is ignored for FTP and SMB file
servers.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007