Bookshelf Home | Contents | Index | Search | PDF

Security Guide for Siebel eBusiness Applications > Web Single Sign-On and Remote Authentication >

Remote Authentication

---

This section describes the processing steps that occur to authenticate a remote user during synchronization. For details on remote computing in the Siebel environment, see Siebel Remote and Replication Manager Administration Guide.

Some things to remember about remote users includes:

Remote users do not connect to the Web server. When remote users synchronize, they connect directly to the Siebel Remote server—the Siebel Server allocated for remote users.
Only one user ID and password can be used to access a local database. Local databases cannot belong to more than one user.
A single user can have multiple Mobile Web Clients, such as two clients on two separate computers.

To synchronize

The Siebel remote user connects to the local database on their laptop and makes transaction modifications. To do this:
The user launches the Siebel icon on the laptop, and then enters a user ID and password.
In the Connect To parameter, choose Local.

The user ID and password are validated by the local database residing on the laptop.

The Siebel application appears in the Web browser and the user navigates through the application making changes as desired.

Later, the user decides to synchronize the local database changes and download updates from the Siebel Remote server. To do this:
The remote user connects to the Siebel Remote server using a dial-up modem or LAN/WAN connection.
The user launches the Siebel icon on their laptop, and then enters a user ID and password.
In the Connect To parameter, choose Local.

The user ID and password are validated by the local database residing on the laptop.

When the Siebel application appears in the Web browser, the user chooses File > Synchronize Database.

The user is now accessing the Siebel Remote server for synchronization.

The Siebel Remote Synchronization Manager authenticates incoming Mobile Web Client requests to make sure that a Mobile Web Client is valid. The Siebel Remote Synchronization Manager validates the Mobile Web Client's user ID against the list of valid Mobile Web Clients in the server database and validates that the effective end date is valid or NULL.

The Siebel Remote Synchronization Manager also verifies that the Mobile Web Client has connected to the correct Siebel Remote server. If the Mobile Web Client connects to the wrong Siebel Remote server, the Synchronization Manager reconnects the Mobile Web Client to another Siebel Remote server and updates the client's local configuration information.

Synchronization Manager for Siebel Remote validates the Mobile Web Client's password by using one of the following authentication methods, represented by a parameter name. The Siebel administrator uses the Siebel Server Manager to set these parameters for the Synchronization Manager. For more information, see Siebel Remote and Replication Manager Administration Guide.

None. Does not validate the Mobile Web Client's password. This is the default setting.
Database. Uses the Mobile Web Client's user name and password to connect Mobile Web Clients to the server database.

NOTE:  You cannot use the Database authentication parameter for Web SSO. Also, you cannot use database authentication if you have enabled password encryption because the Mobile Web Client would have to use the encrypted password to log into the local database.

Siebel. Validates the Mobile Web Client's password against the password stored in the Mobile Web Client's screen.
AppServer. Verifies that the password is the same as the user's operating system password on the Siebel Server.
Once the remote user is authenticated, synchronization begins.

Bookshelf Home | Contents | Index | Search | PDF