Administrator Guide

To configure the OneSign Server, enter either https://ip or https://FQDN values, reboot the client to display the
logon dialog box, and then enter credentials to open the VDI broker dialog box for logon use. You can also set this
feature in your INI file, see Parameters for a xen.ini File in this guide.
The following OneSign features/actions are supported:
○ Client and Broker Authentication
￭ Citrix Virtual Apps (formerly Citrix XenApp)
￭ Citrix Virtual Apps and Desktops (formerly Citrix XenDesktop)
○ Kiosk Mode
○ Fast User Switching
○ Non-OneSign user VDI access
○ Hotkey Disconnect
○ Proximity card reader redirection
○ Guided Question and Answer login
○ Authenticate w/Password
○ Authenticate w/Password + Password Change
○ Authenticate w/Password + Password Change | New Password is Invalid
○ Authenticate w/Proximity Card + Password
○ Authenticate w/Proximity Card + Pin
○ Authenticate w/Proximity Card + Pin | Pin not enrolled
○ Authenticate w/Proximity Card Alone | Retrieve Password
○ Retrieve User Identity Password
○ Reset User Identity Password
○ Update User Identity Password
○ Enroll Proximity Card
○ Lock/Unlock Terminal with Proximity CardLock/Unlock Terminal with Proximity Card
● Caradigm — Caradigm Single Sign-on and Context Management is the product of the Caradigm Company which
provides Single Sign-on and Context Management Services.
i. SSO & CM Server— Enter the IP addresses of the Single Sign-On (SSO) and Context Management (CM)
Servers.
ii. Default Group Name —Type the name of the default group in the Default Group Name box.
iii. Enable logoff remote desktop
○ Select the check-box to log off the current user from the session before system sign-off.
○ Clear the selection to disconnect from the session.
● SECUREMATRIX — SECUREMATRIX enhances the security of enterprise and cloud-based applications while
providing seamless end user experience for a one-time password (OTP) that can be used for authentication with
desktops, Windows, VPNs, intranets, extranets, web servers, e-commerce and other network resources.
To configure the SECUREMATRIX Server, enter either https://ip or https://FQDN values, reboot the client to
display the log on dialog box, and then enter credentials to open the VDI broker dialog box for logon use. You
can also set this feature in your INI file, see the INI section in this guide. For details on SECUREMATRIX, see
SECUREMATRIX documentation.
● HealthCast Single Sign-On (SSO)—HealthCast Single Sign-On (SSO) solution is designed to improve user
convenience, streamline workflow, and strengthen security compliance in demanding environments. The same
proximity cards used for physical access are used to tap-in and tap-out of unique user sessions and to tap-over any
sessions unintentionally left open on the ThinOS Lite devices. Typically, you must type in your password only one time
each day and use your proximity cards to streamline workflow and save time as they move between shared computers
Configuring the connectivity
41