About
The single sign-on feature is available in the Capacity Management suite versions 2.3 and later.
If the single sign-on feature is enabled and configured, users can start the Capacity Management suite using the Microsoft Windows Active Directory user names and passwords that they use to sign in to their workstations.
In a fully configured single sign-on environment, users do not have to enter their user names and passwords to start the application. Instead, they click a shortcut on their desktops or an intranet favorite and they are signed in automatically with their Microsoft Windows Active Directory credentials.
Solution
Clients will work with a TeleTracking Technologies representative to enable and configure the single sign-on feature for your enterprise. By default, the feature is NOT enabled when you first install or upgrade to version 2.3 or later.
How Will Users Access the Application and Sign Out?
If All Configuration Steps Are Complete and the Application is Set Up as an Intranet Site
If the required enabling and configuration steps are completed successfully, the Capacity Management Suite system URL has been set up as a intranet site, and the URL is available as a shortcut on user workstations, then the users can double-click the shortcut and start the Capacity Management Suite system without entering a user name and password.
If the Application is Not Set Up as an Intranet Site
If the Capacity Management Suite system is not set up as an intranet site, then users see the following Windows Security dialog box when they double-click the shortcut.
If the User's Login Type is Not MSAD
If MSAD was not selected in the Login Type list in the user's profile, then the user is prompted to sign in when they access the Capacity Management Suite system.
The user must enter the user name and password and sign in manually.
To Sign In Again After Ending a Session or Signing Out or After a Session Timeout
If a user ends a session or signs out for the day or is signed out automatically because of inactivity (session timeout), the sign-in page appears. The user can:
Enter the user login ID and password and sign in manually, or l (If the user signed in through a single sign-on environment using Microsoft® Windows® credentials) Click Login with Windows Credentials to be signed in automatically.
To Sign In When Another User is Already Signed In on a Workstation
Sometimes a user, such as a supervisor, needs to sign in to the Capacity Management Suite™ system on a workstation where another user is already signed in. In this case, the new user should:
Click the End Session link to end the other user's session.
When the sign-in page appears, the user should enter their own user name and password and sign in manually.
To sign out, the user should click the End Session link to avoid being signed out on all workstations. The Sign Out option signs out the user on all workstations.
If Some Users Should Not Use the Single Sign-On Feature
There might be situations where the single sign-on feature is enabled at an enterprise, but not all users should have access to it. For example, your organization might have users who work with the Capacity Management Suite system and another TeleTracking Technologies application on the same workstation. Your organization might prefer that these users sign in to each application each time that they use it.
Users who should not use the single sign-on feature, although it is enabled for the enterprise, should use a different URL to access Capacity Management Suite system.
If the user should use the single sign-on feature
Example - HTTP://url/xt
Should NOT use the single sign-on feature
Example - HTTP://url/xt/Login.aspx