HP 4250 manual Single Sign-On SSO, Basic Authentication

Note: If the Domain Controller is not available, administrators can use their local account.

When browsing for domain accounts from the Select Account(s) from list of domains, the PSA may ask for a user name and password. The reason is the domain's security policy requires a trusted user account to connect to the domain controller to retrieve the account list. A machine account (i.e. the PSA's) is not sufficient when the domain is configured to protect enumeration of users and groups account information.

Single Sign-On (SSO)

Single Sign-On allows an administrator, using Internet Explorer, to access the PSA without prompting for an account name and password. The PSA will request the browser to provide credentials given when the administrator logged into the Windows workstation. The following scenarios could occur:

1.When an administrator is using Internet Explorer and the URL specified for the PSA is within the browser’s local intranet zone, the browser will automatically send the credentials used to log into the Windows workstation.

❍If the credentials are successfully authenticated with a domain controller and the administrators are also authorized to access the PSA's web interface, then the requested page will be served to the browser. Administrators are authorized if their domain account is listed in the PSA Domain Administrators list.

❍If the credentials are not authenticated with a domain controller or the administrator's account is not authorized to access the PSA, the PSA will prompt for another account name and password (see Basic Authentication).

2.If the PSA administrator is using Internet Explorer but the URL used to access the PSA is not within the local intranet, then the administrator will be prompted for account name and password. In this case, the security prompt given to the administrator will have three fields and the information entered here will be encrypted before being passed to the PSA (the screen shown is for Microsoft Windows NT 4.x; this screen might vary depending on your operating system).

After the name, password, and domain or entered the process is as (1) above.

3. If the administrator is not using Internet Explorer the browser will use the ‘Basic Authentication’ protocol.

Basic Authentication