Skip to main content

Transparent login for a group of users

The Enterprise SSO module allows you to configure transparent login for a specific group of users so that credentials are substituted automatically without using an authenticator.

To configure transparent login without an authenticator for a specific group of users:

  1. In the template of the target application, set the forceReauthentication parameter to 0.

    In Management Console, in the application card, on the General information tab, the Authentication when logging in to the application setting displays the Log in transparently value.

  2. Make sure that the target application is added to the policy.

  3. In the policy settings in Management Console, create an account for the target application with the Prompt every time value for the Authentication when logging in to the application setting. This is required so that the second factor is mandatory for all users by default.

  4. For the users who need transparent login, open the user card, go to the Applications tab, open the target application settings, and create an account with the Log in transparently value for the Authentication when logging in to the application setting.

Users for whom transparent login is configured can select the option without entering an authenticator in the Select an account window of ESSO Agent.