Start SecureLogin based on group membership

  • 7940333
  • 19-Aug-2009
  • 26-Apr-2012

Environment

SecureLogin SSO

Situation

Is it possible to start SecureLogin based on group membership?

SecureLogin and groups

Resolution

By default, the SecureLogin executable (in version 3.5 and later - slproto.exe), starts from the Run key in HKLM in the registry. However, you can use any method you prefer to start SecureLogin, including group membership.

In Novell environments, use the login script to determine if the user is a member of a group using the command;

If Member_Of “Helpdesk_Group” Z:\StartSL.cmd EndIf

In Microsoft Active Directory environments, you can either use GPO (run after login) or login script to determine if the user is a member of a group using the Ifmember.exe utility that comes with the Microsoft resource kit.

IfMember is often used in Windows logon scripts and other batch files. In the following example, if the user logs on and is a member of the Helpdesk group, the SecureLogin runs.

Ifmember ""Helpdesk-Group"" Run ""%ProgramFilesDir%\....\slproto.exe""