HP Systems Insight Manager 5.3 Technical Reference Guide

About login
Single Sign On
Single Sign On allows a link within an HP SIM page to establish an authenticated browser session to a
managed system that supports Single Sign On without requiring users to re-enter their user names and
passwords. However, if you are trying to establish an authenticated browser session with another instance
of HP SIM running on another system, you must re-enter your user name and password. Single Sign On links
exist wherever there is a link to another system.
NOTE: HP SIM is the initial point of authentication. You must browse to another managed system from
within HP SIM.
If you browse to a managed system using any method other than the links within HP SIM, Single Sign On
is not supported, and you must enter the appropriate user name and password for each managed system.
You must set up managed systems to trust an HP SIM system before accepting a Single Sign On command.
Trust is set up at the system by importing the HP SIM system certificate into the Trusted Management Servers
List of the system. See “Setting up trust relationships” for more information.
NOTE: Single Sign On does not work on a Virtual Cluster system. However, it does work on the physical
systems which compose the cluster.
Signing in
Signing in to HP SIM allows access to HP SIM and determines what authorizations you have in HP SIM.
Browsing to HP SIM using SSL encrypts all information between the browser and HP SIM, including sign in
credentials. SSL securely encrypts the password and helps prevent someone from capturing and replaying
a valid sign-in sequence.
The sign-in page has three fields:
• User Name. The name of the user.
• Password. The password for the user name.
• Domain Name. The Windows domain of the user. This field appears in Windows environments only.
NOTE: In a Windows environment, administrators are selected from the operating system during the HP
SIM installation. To sign in to HP SIM, enter the appropriate information for the account in the fields provided.
The User Name field specifies the user name, and the Domain Name specifies the Windows domain. These
fields are required in a Windows environment.
After the credentials are securely received by HP SIM, HP SIM validates the account, verifies that the IP
address is valid, and authenticates the credentials against the Windows domain. See “Users and
authorizations” for details about accounts.
Some sign in failures are caused by failure in the operating system, and some are caused by failure within
HP SIM. Use the operating system User Management tools to address these potential login failures:
• Sign in credentials are not entered correctly. Passwords are case-sensitive.
• The account has been deleted, disabled, or locked out.
• The password for the account has expired or must be changed.
The following reasons for sign-in failure within HP SIM can be addressed on the HP SIM Users and
Authorizations pages:
• The account is not an account for HP SIM.
• You attempt to sign in from an IP address that is not valid for the specified account. The browser systems
can also cause sign-in failures.
• The browser is not configured to accept cookies.
About login 165