Security Zone Definitions

The following terms apply to single sign-on (SSO) security zones:

CAC (Centralized Agent Configuration): Identifies a mechanism by which a Web Agent borrows its configuration properties from a Web Agent configuration object defined in the policy store.
Cookie Provider: Identifies a mechanism by which single sign-on is implemented in Web Agents across multiple domains. One of the domains is designated as the master domain, and the Web Agents from the other domains are re-directed to a Web Agent in the master domain to provide them with the cookies in that domain.
SSO (Single Sign-On): Identifies a mechanism by which a user authenticated once will not be rechallenged for credentials.
SSO Zone: Identifies a sub-set of SSO, defined by an arbitrary identifier (zone name) used to segment application SSO within a single cookie domain. All applications in the same SSO zone allow SSO amongst themselves. SSO to and from other SSO zones may or may not be allowed as defined by zone trust relationships.
Trusted SSO Zone: Identifies a foreign zone trusted by a local zone for SSO.