First of all, to support Desktop SSO, your DualShield SSO server must be installed on a domain member machine in your corporate network.

Create a Web SSO Logon Procedure

The first step is to create a logon procedure for the external logon

  1. Login to the DualShield Management Console
  2. In the main menu, select "Authentication | Logon Procedure"
  3. Click the "Create" button on the toolbar
  4. Enter "Name" and select "Web SSO" as the type



  5. Click "Save"
  6. Click the Context Menu icon of the newly create logon procedure, select "Logon Steps"
  7. In the popup windows, click "Create" button on the toolbar
  8. Select the authentication method, i.e. "Static Password", and "One-Time Password"



  9. Click "Save"

Create a Desktop SSO Logon Procedure

The next step is to create a logon procedure for the internal logon. This time, we need to select the "Desktop SSO" as the type. 

We'll need to create just one logon step for this logon procedure. 

In the logon step, add "Windows Authentication"

Now, your web application has two logon procedure: Web SSO & Desktop SSO.

Create a network for the corporate network 

  1. In the main menu, select "Configuration | Networks"
  2. Click the "Create" button on the toolbar
  3. Enter "Name"
  4. Click the "Gear" button to add the IP range
  5. Add the IP arrange that covers your corporate network



  6. Select "Internal" as the "Type"



  7. Click "Save"
  8. Left click the context menu of the newly create network, i.e (Internal at DeepnetID), and select the "Applications", such as "GoogleApp"