User guide

Odyssey Access Client User Guide
72  Connecting and Signing on to an Infranet Controller
4. In the Server URL field, enter the DNS name or the IP address of the Infranet
Controller to which you intend to connect.
5. In the Authentication Profile field, specify the name of a profile for
authenticating to a specific Infranet Controller. The profile provides all the
information needed for authenticated access to that Infranet Controller. See
“Adding or Modifying a Profile” on page 38 for details about setting up a profile.
Connecting and Signing on to an Infranet Controller
This section describes how to connect and sign on to an Infranet Controller.
FIPS Mode Constraint
The only outer authentication method supported for FIPS mode is EAP-TLS; no
inner authentication method is supported, including JUAC. This means that, when
FIPS mode is on, users cannot connect to an Intranet Controller.
Web Portal for Installing and Configuring OAC
If you attempt to access the Web or protected network resources on your corporate
network without having OAC installed on your system, the network firewall might
redirect you automatically to a special Web portal that installs and configures OAC
on your machine so that you can sign on to an Infranet Controller and access
protected resources. If an older version of OAC is already installed on your machine,
the latest version will be installed.
Depending on the configuration policy for your network, this installation process
might include a dialog box that prompts you to sign in to the Infranet Controller.
There might also be a prompt to trust the server certificate. See the next section,
“Loading a Certificate to the Trusted Server Database” on page 72 for more
information.
Loading a Certificate to the Trusted Server Database
The first time that you navigate to the Web portal, you might be prompted to add a
certificate to your trusted server database. This happens only if you do not have the
certificate on your endpoint and if the certificate is available from the local trust
server. If you choose not to accept the certificate and do not have temporary trust
enabled, authentication to that trust server will fail. See “Enabling Temporary Trust”
on page 19 and “Validating a Server Certificate—Mutual Authentication” on page 46
for more information about managing trust.
To connect and sign on to an Infranet Controller:
1. Open the Infranet Controllers folder (Figure 14) in the sidebar.
2. Double-click the Infranet Controller to which you intend to connect. There
might be only one, your default Infranet Controller.