Reference Guide

Authentication
Dell Hybrid Client supports the following configuration options for users or processes to authenticate to the product
subsystems:
● Account privilege levels—There are two types of user accounts that are enabled for Dell Hybrid Client:
○ Guest user—The guest user account is a low-privilege account. It is available for users who do not have an Active
Directory account but need access to Dell Hybrid Client. You can enable or disable the guest user account using Wyse
Management Suite. If you have logged in as a guest user, local configurations are not preserved across logins. Dell
Technologies recommends that the guest user password is changed from Wyse Management Suite. By default, the
password is not enabled for a guest user.
○ Domain user—The domain user account is a high-privilege account where all the configurations are preserved across
logins.
For more information about configuring the account settings, see the Dell Hybrid Client Version 1.x Administrator's Guide at
www.dell.com/support.
● Virtual Desktop Infrastructure (VDI) Broker agent authentication—AD credentials are used for authenticating users
to remote VDI brokers agents. This allows user to access remote sessions and remote resources. Credential type can be
a domain username with a password or a smart card. You can also use other authentications that are supported by both
remote systems and local devices. User credentials are configured and managed by remote resource systems such as AD
controllers and Broker agents. The following are the remote connection deployment options:
○ Citrix Virtual Apps and Desktops
○ VMware Horizon
○ Windows Remote Desktop Services
○ Direct RDP connections
NOTE: Smart card authentication is not supported for RDP connections.
For more information about configuring the Broker agent settings, see the Dell Hybrid Client Version 1.x Administrator's
Guide at www.dell.com/support.
● Active Directory authentication—Dell Hybrid Client supports user authentication with Active Directory, both local AD
and on-premises user synchronization with Azure AD. Active Directory allows an administrator to enable or disable the user
authentication to specific work domains. As a domain user, you can securely connect to the work domain using the Active
Directory credentials.
For more information about AD joining, see the Dell Hybrid Client Version 1.x Administrator's Guide at www.dell.com/support.
● Smart card-based authentication—Dell Hybrid Client enables a domain user to log in to the device using a smart card.
This feature is available from Dell Hybrid Client version 1.5 onwards. Dell Hybrid Client supports Yubikey and Gemalto smart
cards.
For more information about how to log in as a domain user using a smart card, see the Dell Hybrid Client Version 1.x
Administrator's Guide at www.dell.com/support.
● Unauthenticated Interfaces—Dell Hybrid Client supports guest user login without a password. Dell Technologies
recommends that as an administrator, you must set a password for the guest user account from Wyse Management Suite.
● Wyse Management Suite server authentication—Dell Hybrid Client-based device is registered to the Wyse Management
Suite server through a valid group registration token. The server authentication is based on the group token and the device
or user group to which the device is registered on Wyse Management Suite.
For more information about registering the device to Wyse Management Suite, see the Dell Hybrid Client Version 1.x
Administrator's Guide at www.dell.com/support.
Login security settings
● Device login security—Device login is enabled for temporary guest users and domain users. A guest user can access Dell
Hybrid Client with or without a password as configured by the administrator on the Wyse Management Suite console. A
domain user is a registered user with valid credential details.
● End User License Agreement (EULA) acceptance—When you start a device that is powered by Dell Hybrid Client-based
device for the first time, the End-User License Agreement (EULA) screen is displayed. EULAs must be read and accepted
to continue using the Dell Hybrid Client software. EULA must be accepted first when using the DHCP or DNS method for
automatic device enrollment.
● Failed Login behavior and user account lockout—During login authentication failures, a message Please try again is
displayed on the login screen. Dell Hybrid Client reloads the login user interface when you enter incorrect login credentials.
10
Product and subsystem security