Administrator Guide

To congure the OneSign Server, enter either https://ip or https://FQDN values, reboot the client to display the logon dialog
box, and then enter credentials to open the VDI broker dialog box for logon use. You can also set this feature in your INI le,
see Parameters for a xen.ini File in this guide.
The following OneSign features/actions are supported:
– Client and Broker Authentication
◦ Citrix Virtual Apps (formerly Citrix XenApp)
◦ Citrix Virtual Apps and Desktops (formerly Citrix XenDesktop)
– Kiosk Mode
– Fast User Switching
– Non-OneSign user VDI access
– Hotkey Disconnect
– Proximity card reader redirection
– Guided Question and Answer login
– Authenticate w/Password
– Authenticate w/Password + Password Change
– Authenticate w/Password + Password Change | New Password is Invalid
– Authenticate w/Proximity Card + Password
– Authenticate w/Proximity Card + Pin
– Authenticate w/Proximity Card + Pin | Pin not enrolled
– Authenticate w/Proximity Card Alone | Retrieve Password
– Retrieve User Identity Password
– Reset User Identity Password
– Update User Identity Password
– Enroll Proximity Card
– Lock/Unlock Terminal with Proximity CardLock/Unlock Terminal with Proximity Card
• Caradigm — Caradigm Single Sign-on and Context Management is the product of the Caradigm Company which provides
Single Sign-on and Context Management Services.
a SSO & CM Server— Enter the IP addresses of the Single Sign-On (SSO) and Context Management (CM) Servers.
b Default Group Name —Type the name of the default group in the Default Group Name box.
c Enable logo remote desktop
– Select the check-box to log o the current user from the session before system sign-o.
– Clear the selection to disconnect from the session.
• SECUREMATRIX — SECUREMATRIX enhances the security of enterprise and cloud-based applications while providing
seamless end user experience for a one-time password (OTP) that can be used for authentication with desktops, Windows,
VPNs, intranets, extranets, web servers, e-commerce and other network resources.
To congure the SECUREMATRIX Server, enter either https://ip or https://FQDN values, reboot the client to display the
log on dialog box, and then enter credentials to open the VDI broker dialog box for logon use. You can also set this feature in
your INI le, see the INI section in this guide. For details on SECUREMATRIX, see SECUREMATRIX documentation.
• HealthCast Single Sign-On (SSO)—HealthCast Single Sign-On (SSO) solution is designed to improve user convenience,
streamline workow, and strengthen security compliance in demanding environments. The same proximity cards used for
physical access are used to tap-in and tap-out of unique user sessions and to tap-over any sessions unintentionally left open
on the ThinOS Lite devices. Typically, you must type in your password only one time each day and use your proximity cards to
streamline workow and save time as they move between shared computers securely. Also, proximity cards can be secured
44
Conguring the connectivity