Oracle Enterprise Single Sign-on Kiosk Manager User s Guide Release 10.1.4.0.3 E10338-01 June 2007
Oracle Enterprise Single Sign-on Kiosk Manager User s Guide, Release 10.1.4.0.3 E10338-01 Copyright 2006-2007, Oracle. All rights reserved. The Programs (which include both the software and documentation) contain proprietary information; they are provided under a license agreement containing restrictions on use and disclosure and are also protected by copyright, patent, and other intellectual and industrial property laws. Reverse engineering, disassembly, or decompilation of the Programs, except to the extent required to obtain interoperability with other independently created software or as specified by law, is prohibited. The information contained in this document is subject to change without notice. If you find any problems in the documentation, please report them to us in writing. This document is not warranted to be error-free. Except as may be expressly permitted in your license agreement for these Programs, no part of these Programs may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose. If the Programs are delivered to the United States Government or anyone licensing or using the Programs on behalf of the United States Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the Programs, including documentation and technical data, shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement, and, to the extent applicable, the additional rights set forth in FAR 52.227-19, Commercial Computer Software--Restricted Rights (June 1987). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065. The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently dangerous applications. It shall be the licensee's responsibility to take all appropriate fail-safe, backup, redundancy and other measures to ensure the safe use of such applications if the Programs are used for such purposes, and we disclaim liability for any damages caused by such use of the Programs. Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. The Programs may provide links to Web sites and access to content, products, and services from third parties. Oracle is not responsible for the availability of, or any content provided on, third-party Web sites. You bear all risks associated with the use of such content. If you choose to purchase any products or services from a third party, the relationship is directly between you and the third party. Oracle is not responsible for: (a) the quality of third-party products or services; or (b) fulfilling any of the terms of the agreement with the third party, including delivery of products or services and warranty obligations related to purchased products or services. Oracle is not responsible for any loss or damage of any sort that you may incur from dealing with any third party.
Table of Contents Welcome to Oracle Enterprise Single Sign-On Kiosk Manager... 4 Session Agent... 5 Session Agent in System Tray... 5 Desktop Manager... 6 Desktop Manager... 6 Locking and Unlocking Sessions... 7 Locking the session... 7 Unlocking the session... 7
Welcome to Oracle Enterprise Single Sign-On Kiosk Manager Oracle Enterprise Single Sign-On Kiosk Manager (ESSO-KM) delivers a secure, easy to use and easy to administer solution that addresses the needs of traditional Single Sign-Off in a kiosk environment. ESSO-KM has a client-side agent that suspends or closes inactive sessions and seamlessly shuts down all applications. First Time User Notes: In order to log into your own session, your administrator must have a synchronization setup for you. If this is your first time using ESSO-LM, upon logging into Kiosk Manager, the ESSO-LM First Time Use Wizard appears. Follow the prompts. Select the appropriate Authentication plug-in for the Primary Logon Method. 4
Session Agent Session Agent in System Tray If enabled, the Session Agent icon displays in the system tray. Click the ESSO-KM Tray Icon in your Windows system tray to display a shortcut menu of program functions. Note: The ESSO-LM Administrative Console must be closed in order to run the Session Agent. If you start the Session Agent while the ESSO-LM Administrative Console is still running, an error message displays saying, Cannot run ESSO-KM until ESSO-LM Administrative Console is closed. Note: The system tray icon tool tip displays the logged in user's name, for example ESSO-KM - User Name (where 'User Name' is the user's first and last name). This information is retrieved from the synchronization data. The username will not appear if a synchronization has not occurred. ESSO-KM System Tray Menu Options: About ESSO- Displays version information about ESSO-KM. KM Help Displays the online help for ESSO-KM. Lock Session ESSO-LM Locks the current session. Displays the ESSO-LM functions available. ESSO-LM System Tray Menu Options: Configuration Displays a submenu of options including: o Logon Manager - Logon Manager displays your stored logons and also lets you modify the properties of each logon. o Settings - The Settings dialog lets you control ESSO-LM password features. Pause Help About ESSO- LM Logon Using ESSO-LM Turns off ESSO-LM logons, including the Auto-Prompt and Auto- Recognize features, and the Logon using ESSO-LM menu option, below. Displays the online help for ESSO-LM. Click this help button for help with ESSO-LM. Displays version information about ESSO-LM. Engages ESSO-LM to supply information to a logon request.
Desktop Manager Desktop Manager The Desktop Manager is a full-screen interface that controls the locked session desktop. The Desktop Manager contains the following information and choices: The current session will expire in: Time remaining before the current session automatically closes. Current session owner: The name of the current session owner appears, if one is currently logged in. Unlock Existing Session This option is available for the existing session to be locked/unlocked by the session s owner. Clicking this option prompts the session owner to re-authenticate (if unlocking session). Start Session This option terminates the current session and allows a different user to be able to start their session. Clicking this option prompts the new user to authenticate to ESSO-KM. A confirmation window may appear asking if you are sure you want to start a new session. Click OK. Reset Password Depending on your system's configuration, this option may or may not appear. Clicking this link displays ESSO-P's Web interface. Enter your User Name, click OK and follow the prompts to reset your password. I want to shut down this computer Clicking this option shuts down the kiosk (if enabled by kiosk and/or system administrator). A confirmation window may appear asking if you are sure you want to shut down this computer. Click OK. I want to restart this computer Clicking this option restarts the kiosk (if enabled by kiosk and/or system administrator). A confirmation window may appear asking if you are sure you want to restart this computer. Click OK. 6
Locking and Unlocking Sessions Locking the session The following methods lock a session: o When configured with smart card, proximity card, or other presence-sensing authenticator, ESSO-KM automatically locks a session if the strong authenticator is no longer present (i.e. removed from reader or is out of range). o The kiosk logs off and locks the current session after a pre-determined amount of time in which the session is idle. o Screen saver timer: ESSO-KM locks the session when the Kiosk screen saver would normally start. o ESSO-KM Agent tray icon menu: Click the ESSO-KM Agent tray icon menu and click Lock Session. o Clicking the Windows Key + L (on XP and above) o Any activity that would normally lock the desktop will cause ESSO-KM to lock the session. Unlocking the session The following methods unlock a session: o When configured with smart card, proximity card, or other presence-sensing authenticator, ESSO-KM automatically initiates a session when a strong authenticator is detected (i.e. inserted into reader or is in of range). o The current session can be unlocked from the Desktop Manager by reentering your credentials. o If another user is logged into this session, you may still utilize the kiosk by ending the current users session from the Desktop Manager.