14.1 About the SLAP Tool

The SecureLogin Attribute Provisioning (SLAP) tool allows SecureLogin to leverage user data from an organization’s provisioning system. You can use SLAP to import the following data, in XML format, from third party applications into the SecureLogin user’s datastore as well as export information (except user application passwords and the user’s passphrases).

Data that can be manipulated includes:

The SLAP tool command operates as a provisioning tool between SecureLogin data in a directory and in an XML file. The XML schema used is the same as the Copy Settings GUI importer/exporter. In addition to Copy Settings, the SLAP tool can extract user names. The SLAP tool cannot export from SecureLogin sensitive data such as passwords and passphrases.

For example, an organization with 10,000 users in a SAP system, implementing SecureLogin can speed deployment significantly by automating the initial user logon with the SLAP tool. Use a file containing multiple users’ username/password combinations from SAP, and import the file into the SecureLogin datastore as a bulk process using the SLAP tool. The SLAP tool removes the requirement for each user to enter credentials on first log on to SecureLogin.

NOTE:When the SLAP tool is used for initial provisioning of SecureLogin user accounts, before any SecureLogin data has been stored for users, the XML file must include a passphrase question and response. This question/response can be the same for each user and changed by the user after deployment.