Using Remote Graphics Software

Using Single Sign-on

When RGS Single Sign-on is not installed, users are normally required to authenticate twice when connecting - once to connect from the RGS Receiver to the RGS Sender (RGS connection) and another to log into or unlock the remote desktop (Desktop session).

When Single Sign-on is installed, users will normally need to enter their credentials only once. The user will be prompted on the RGS Receiver to enter their credentials. These credentials will be used to authenticate the connection to the RGS Sender. If the user is authenticated on the sender, the same credentials will be used to silently log into or unlock the user onto the users desktop.

Single Sign-on will only occur when the Sender is in one of two states - the logged off state or the locked desktop state. These two states are WinLogon states, and are controlled by the WinLogon.exe process running on the Sender

system. WinLogon.exe is the Window's logon manager and is the process responsible for managing user logon and logoff. The WinLogon.exe process controls these states, more formally known as WlxDisplaySASNotice and WlxDisplayLockedNotice states.

When the remote desktop is in the logged off state (WlxDisplaySASNotice), the following dialog is present on the remote desktop:

When the remote desktop is in the locked desktop state (WlxDisplayLockedNotice), the following dialog is present on the remote desktop:

85