Work with ESSO Agent

To access applications through Enterprise SSO using an authenticator, you must:

• configure the account of the application;
• make sure that the user who needs access is added to the policy with the target application;
• register an authenticator.

Start ESSO Agent

1. Log in to the workstation. A pop-up message about opening a Single Sign-On session appears in the taskbar.

2. ESSO Agent starts automatically when you log in to the operating system. To start it manually, select Axidian→Enterprise SSO Agent in the Start menu.

Select the target application

1. Open the ESSO Agent application in one of the following ways:

   • Press [Ctrl]+[Alt]+[Q].

   • Double-click the application icon in the Windows notification area.

   • Right-click the icon in the Windows notification area and select Quick start in the application context menu.

2. The Select an application window displays the applications allowed to be started with ESSO Agent. The window appearance is defined by the ESSO application settings. Select the required application.

   Note

   An application is not displayed in the list if ESSO Agent cannot find its executable file at the user workstation.

   If an application contains several components, the executable files of each component are grouped under a single name in the quick launch panel for more convenience.

3. If several SSO accounts are configured for one target application, select the account after you select the application.

Log in to an application with an authenticator

To log in to an application with an authenticator:

1. Select the username and the login method. By default, the operating system offers the last method used. Follow the on-screen instructions. If you have several registered authenticators, you can use any of those.

2. If several authenticators are registered, select any of those. To select an authenticator, click Switch authentication method.

3. After authentication, the login window of the target application appears. The Username and Password fields are automatically filled in with the data specified when the SSO account was created, and the login is performed.

   Besides automatic filling in of credentials, manual entry of the username and password is also supported. The username and password entered at the first login to the application are stored and filled in automatically at the next login.

   If authentication is cancelled, the login is not performed: the current application form or the application itself is closed.

4. If the application start settings allow starting the application only with ESSO Agent and authentication is required to log in, cancelling authentication results in an error message.

Access to target applications is regulated by administrative settings. Some applications can be prohibited from starting by the ESSO administrator. Prohibited applications are not available in the Select an application window. An attempt to start a prohibited application results in the error message A device attached to the system is not functioning.

Switch the user

When using ESSO Agent, you can select a different user to access an application.

To switch the user:

1. Log in to the operating system.

2. Right-click the ESSO Agent icon in the Windows notification area.

3. In the application context menu, select Switch user...

4. In the Login to SSO window, enter the name of the account you want to use to log in to the application.

5. Authenticate with one of the authenticators registered for the selected user. If authentication is successful, ESSO Agent opens an SSO session for the selected user.

Update data

If the SSO profile data changes, you need to load the changes into ESSO Agent. To do this:

1. Right-click the ESSO Agent application icon in the Windows notification area.

2. In the context menu that opens, select Update data.

The data update status is displayed in pop-up windows.

Examples of pop-up windows

• Updating data:

• New data received:

• Data update error:

Deactivate hotkeys

If required, you can deactivate the use of hotkeys.

The following key combinations are enabled by default:

• [Ctrl]+[Alt]+[Q]: Opens the quick start window.
• [Ctrl]+[Alt]+[U]: Performs an ESSO data update.
• [Ctrl]+[Alt]+[R]: Performs forced processing of the application form (re-matching).

To deactivate hotkeys:

1. Right-click the ESSO Agent application icon in the Windows notification area.

2. In the context menu that opens, select Deactivate hotkeys.