User's Manual

154 | Onboard Dell Networking W-ClearPass Guest 6.4 | User Guide
14.To specify that when the user changes their passcode the new value cannot be one that was used within a
defined period of the passcode's history, use the counter in the PIN History field. The number you select is
the number of recent passwords whose values will not be allowed.
15.Click Save Changes. The passcode policy is available as a configuration unit on the Configuration Profile
form.
For more information about configuration profiles, see "Configuration Profiles" on page 165
Configuring Single Sign-On Settings
Single Sign-On (SSO) settings let you configure the access-control properties that allow a user to log in once to
access multiple related but independent applications or systems. SSO authenticates the user across all allowed
resources during their session, eliminating additional login prompts. An SSO setting includes its name and
description, the account's display name, and the Kerberos account principal name, realm name, and URL prefix
matches. SSO settings you define can be used in configuration profiles for an iOS device. You can define
multiple SSO settings.
SSO settings are only supported on iOS devices; they are ignored by all other devices.
To configure an SSO setting:
1. Go to Onboard > Configuration > iOS Settings. Either click an existing SSO setting's name in the list; or
click Add New, select SSO Settings in the Settings Type drop-down list, and click Create. The Single
Sign-On Settings form opens.
2. In the Name field, give the SSO setting a short name that identifies it clearly. SSO setting names can include
spaces.
3. If you are duplicating an SSO setting, the original name has "Copy" appended to it. You may highlight this
name and replace it with a new name.
4. In the Description field, briefly describe the characteristics of the SSO setting.
5. In the Account Description field, enter the account display name.
6. In the Kerberos SSO area, enter the Kerberos principal name in the Principal Name field. This is a unique
ID, and includes three parts:the primary, the instance, and the realm. These follow the format
primary/instance@REALM, where: