1

The administrator implements pass ticket functionality.

2

The pass ticket is generated by an authentication server on behalf of a client workstation requesting access to CA TPX.

3

The pass ticket is automatically forwarded to CA TPX, usually through logon data.

4

CA TPX manages the pass ticket (or one-time only password) by forwarding it as the current password to the external security system.

5

The security system authorizes the user for CA TPX using the pass ticket.

Note: If a user is passed to a second region through the Affinity feature, Affinity Pass generates another pass ticket and forwards it to the Affinity application id.

6

A pass ticket can be generated for each application subsequently accessed through CA TPX, including ACCESS=PASS applications.