The Scripting Language

The SecureLogin scripting language is a key feature of single sign-on functionality. The scripting language enables SecureLogin to be compatible with almost all network environments and applications, including those that are developed in-house, without the need to modify any application code.

SecureLogin uses the scripting language to provide a flexible single sign-on and monitoring environment. For example, the SecureLogin Windows Agent watches for application login boxes. When a login box is identified, the agent runs a script to enter the username, password, and background authentication information.

The script language is used in individual application scripts to retrieve and enter the correct login details. These scripts are stored and secured in a Directory (for example, Novell^® eDirectory^TM) to ensure maximum security, support for single-point administration, and manageability.

The script language is used to automate many login processes, such as multi-page logins and login panels requiring other information (such as a surname or telephone number) stored in the Directory. The script language also contains the commands required to automate password changes on behalf of users and request user input when it is required.

The scripting language has the following advantages:

• Enables you to define single sign-on methods for almost any Windows*, mainframe, Internet, intranet, terminal server, or UNIX* application.
• Provides single sign-on functionality without installing back-end modules on your application servers.
• Provides the flexibility for you and your application owners to choose what to do after an application-generated message is detected.

  This feature gives you full control over your single sign-on environment.

• Allows more sophisticated single sign-on to supported applications, including the ability to seamlessly handle several versions of one application.

  This feature is especially important when you upgrade your applications.

• Stores SecureLogin data (for example, user credentials and application scripts) in the Directory and protects the data.
• Can use Novell SecretStore^® technology to provide additional benefits:
  • Provides an additional level of security.
  • Enables you to share secrets with other applications (for example, Novell iChain^® and Novell Portal Services).
  • Enables you to use NICI between the workstation and the server.

  SecretStore requires Novell eDirectory.

• On startup, locates objects in the Directory and caches their encrypted contents in memory (and optionally on disk) for later use by the workstation's SecureLogin single sign-on agent.

SecureLogin allows you to define which applications are enabled for single sign-on. This option gives you the following:

• Full control of which applications are single-sign-on enabled.
• The ability to update the entire Directory database with a new application login script by updating a single object.

The corporate scripts are stored in a Container object rather than individual User objects. For users, the result is a less complex system. For you as the administrator, the improved login mechanisms provide the following:

• A greater level of accountability with increased productivity and security.
• A reduced workload at the help desk because of significantly fewer password resets.