SSO question

Discussion about security topics in WinCC OA!
Search

Post Reply
6 posts • Page 1 of 1
ilariabonori
Posts: 10
Joined: Thu Dec 13, 2018 12:54 pm

SSO question

Post by ilariabonori » Mon Feb 25, 2019 1:21 pm

Hi to all,

I have a question about Single Sign On login.

Is it possible, after login, to change the user in the application (without relogin on the windows machine)?

Thanks
Ilaria

User avatar
leoknipp
Posts: 1648
Joined: Tue Aug 24, 2010 5:28 pm

Re: SSO question

Post by leoknipp » Mon Feb 25, 2019 2:10 pm

The idea of Single-Sign-On is that the user logged on to the operating system is used in WinCC OA.
Why do you want to change the user afterwards?

Best Regards
Leopold Knipp
Senior Support Specialist

ilariabonori
Posts: 10
Joined: Thu Dec 13, 2018 12:54 pm

Re: SSO question

Post by ilariabonori » Tue Feb 26, 2019 10:16 am

Thanks for your answer.

This is a client request to avoid the log off via Windows page.

It is possible to implement this functionality?
Best regards
Ilaria Bonori

User avatar
leoknipp
Posts: 1648
Joined: Tue Aug 24, 2010 5:28 pm

Re: SSO question

Post by leoknipp » Tue Feb 26, 2019 2:14 pm

If you want to switch the user in WinCC OA without changing the Windows user you can turn off SSO. The idea of SSO is that the WinCC OA user is always the same like the OS user.
If SSO is not used you can log on in WinCC OA with any user defined in your system.

Best Regards
Leopold Knipp
Senior Support Specialist

ilariabonori
Posts: 10
Joined: Thu Dec 13, 2018 12:54 pm

Re: SSO question

Post by ilariabonori » Tue Feb 26, 2019 2:57 pm

Because in this post there is a discussion about SSO login ULC UX Client.

viewtopic.php?f=15&t=8030&sid=c7669c15c ... 481a5ad1ce

Is it possible to "disable" SSO if some user wants to connect directly?

Thanks a lot.
Best regards
Ilaria Bonori

User avatar
leoknipp
Posts: 1648
Joined: Tue Aug 24, 2010 5:28 pm

Re: SSO question

Post by leoknipp » Tue Feb 26, 2019 4:27 pm

SSO is only used for those workstations where the permission bit 32 is set. It is not related to the user, only to the workstation (computer name).
You can turn it on or off for every single workstation.
For details please have a look at the WinCC OA Documentation: System Management --> Authorizations --> Login.

Best Regards
Leopold Knipp
Senior Support Specialist

Post Reply
6 posts • Page 1 of 1