Transparent Identification Overview

Administration > IWSVA Configuration > User Identification | User Identification

Transparent Identification uses several authentication mechanisms to reduce the number of times the user must authenticate to access the Internet. It combines domain-level authentication and the Windows client polling activities into one transparent operation to discover the user credentials and to eliminate the need to manually enter authentication credentials.

Using Transparent Identification, IWSVA:

Parses the events in the security log on the Active Directory server to obtain the IP-user mapping relationship
Retrieves Windows client's active user and domain name
Uses the fetched information to match with policies to reduce the pop-up authentication window as much as possible

If the transparent identification query fails, IWSVA leverages the existing proxy- and browser-based LDAP authentication methods.

Note: The following exceptions apply to Transparent Identification:
          1 - The Transparent Identification solution only applies to Windows AD 2003 and 2008 environments.
          2 - Login names using the "%" special character are not supported when the Window Client Query is enabled.
          3 - Login names using the “$” special character are not supported when Domain Controller query is enabled.
          4 - Transparent Identification cannot distinguish the correct user when:
              a - More than one user accesses a shared PC with different logon accounts or
              b - The same user logs into a single machine with the same credentials to activate multiple sessions.

Transparent identification solution applies to the following client platforms:

Window 2000
Windows XP
Windows 2003
Windows 2008
Windows Vista
Windows 7

Transparent identification applies to all deployment modes which supports Active Directory (AD) authentication. Other restrictions apply.

Transparent Identification Overview

See also: