How Automatic Login Works

Enterprise Administration Guide › Implementing Shared Accounts › SAM Automatic Login › How Automatic Login Works

How Automatic Login Works

SAM automatic login lets you check out a privileged account password and log in to the SAM endpoint in a single step.

The following process explains how SAM automatically logs you in to an endpoint. You must create a login application in CA ControlMinder Enterprise Management and assign the application to a SAM endpoint before you begin this process:

You check out a privileged account password and select the login application that CA ControlMinder Enterprise Management uses to log in to the endpoint.
If ActiveX is not installed on your computer, the following occurs:
1. CA ControlMinder Enterprise Management sends an ActiveX package to your computer.
2. You install ActiveX.
  If you do not install ActiveX, you cannot automatically log in to the endpoint.
Once ActiveX is installed, ActiveX downloads the script file defined in the login application from the Enterprise Management Server to your computer.
The script file contains the privileged account password. The script file runs, connects to the endpoint, and automatically enters the credentials of the privileged account.

Note: ActiveX does not save the script file on your computer.
A terminal, Windows Remote Desktop, or Internet browser window opens.
You are logged in to the privileged account on the endpoint.
When you finish the session, one of the following occurs:
- If you check in the privileged account password before you close the remote window, SAM sends a notification that it will close the window after a grace period. After the grace period elapses, SAM closes the window and ends the session.
  Note: The grace period is defined in the script file. You can customize the script file to increase or decrease the grace period.
- If you close the remote window and do not check in the privileged account password, SAM sends a notification that asks if you want to check in the password.