HP Remote Graphics Software 5.4.0 User Guide

If another user is already logged into the Remote Computer, the second authentication step is replaced
by an authorization step, in which the currently logged-in user receives an authorization prompt to
allow or disallow the new user to join (connect to) the existing desktop session (see
Figure 2-10 RGS
connection process if another user is already logged into the Remote Computer on page 20). The
new user is allowed to connect to the existing RGS connection only if the currently logged-in user
authorizes the connection.
Figure 2-10 RGS connection process if another user is already logged into the Remote Computer
There are a number of variations of the Standard Login process, as detailed in the diagram of the
Standard login process on the tabloid page (the last page of the PDF version) of this guide.
2.10 Single Sign-on and Easy Login
RGS supports two additional login methods on certain Windows-based Remote Computers. These login
methods are currently only supported on Windows XP Sender platforms. These two methods allow users
to enter their credentials only once in connecting to a Remote Computer—these methods are described
below, along with which authentication process is used:
Single Sign-on—The RGS connection authentication process is used (step 1 in
Figure 2-9
Standard Login process on page 19 and Figure 2-10 RGS connection process if another user is
already logged into the Remote Computer on page 20). If authentication is successful, the user will
immediately see the Windows desktop session without needing to explicitly log into Windows or
unlock the desktop. Single Sign-on is described further in
Single Sign-on on page 97.
Easy Login—The user is pre-connected to the system and standard Windows login screens are
used to login to the desktop or unlock the screen. If Windows authentication is successful, the user
will immediately see the desktop session without needing to be first authenticated by the RGS
Receiver/Sender. Easy Login is described further in
Easy Login on page 96.
If neither Single Sign-on nor Easy Login is selected, the default Standard Login will be used. In terms of
selecting between Single Sign-on and Easy Login, two factors to consider are:
If Single Sign-on is used with HP Session Allocation Manager (SAM), the user will only need to
enter their credentials once to connect to multiple Remote Computers. The credentials are entered
when authenticating with SAM—thereafter, each RGS connection is automatically authenticated,
and a Remote Display Window from each Remote Computer is automatically displayed on the
Local Computer.
Easy Login supports GINA (Graphical Identification and Authentication) chaining, allowing
custom 3rd party login mechanisms to be integrated into RGS. Single Sign-on does not support
chaining of 3rd party GINA modules.
20 Chapter 2 RGS overview ENWW