UC_USER_LOGON - Single Logon

This Variable (VARA) object allows you to define whether automatic logon (Single Logon) is allowed. It is supplied in the system client 0000 and its settings apply to the whole Automation Engine system.

Access to the operating system is granted by specifying a valid user ID and password. However, if UC_USER_LOGON is enabled, the system checks if the Client has a Users object and, if so, it logs on automatically. For more information, see Users (USER).

Note: When Single Logon is enabled, access control is shifted to the OS of the browser. Unattended screens can become a security risk and must therefore be avoided by using the relevant operating system.

Single Logon can also be used for CallAPIs, thus avoiding storing passwords in programs or procedures. Therefore, no changes are required when the password is changed. For more information, see CallAPI.

This variable includes the following keys:

Enabling Single Logon

The following steps are required to enable Single Logon:

  1. Log on to system client 0000.

  2. Specify the keys for your operating systems in the variable UC_USER_LOGON.

  3. Define the relevant Client and User object.

    Note: The User object name must be the same as the one used for logging on to the OS.

    Example

    For Windows:

    • User name: Smith
    • Domain: UC4

    In this case, the name of the User object should be SMITH/DEV.

  4. Start the Automic Web Interface using the following parameters:

    • -Cclient

      For Windows and UNIX or Linux:

      The user name is taken from the operating system. The system then searches an AE user with that name. The department is not taken into consideration. There can only be one user with this name, regardless of the department. If the user is found, logon is accepted without password verification.

    • -Dclient

      Alternative parameter for -C under Windows:

      The user name is taken from the operating system. The particular Windows domain is used as the department. If the user is found, logon is accepted without password verification.

    • -SAE system or connection name

      It is crucial to indicate the name in order to enable automatic logon because there can be more than one AE system. The login window is displayed if this parameter is missing.

      You can also enter the connection name which is specified in the configuration fileuc4config.xml, XML element <connection name="Name" system="System"> instead of the AE system name.

    These parameters can be stored in different places (for example, as a link) and include the client and the AE system.

See also: