Re: SSO/EIM

It's one of those things we set up in a hurry, documented and turned over
to the help desk personnel and tried to forget all we knew about it - sort
of like printer configuration.
Basically we had a medical division that said we had to have biometrics.
So the only way they can log on is via a PC that has a fingerprint scanner
built in or this attached fingerprint scanner. Their 5250 sessions are
set to bypass sign on. In fact, if they log off and get a sign on screen
they can't sign on as their user profile has been modified with no
password and "Local password management" turned off. IOW, raw 5250 telnet
does not support EIM but iSeries Access does and that's why we use bypass
signon screen.
iSeries Access has a section that we use to administer this. It's under
Network and it's called Enterprise Identity Mapping. I submitted a DCR to
have lookup capability into Active Directory and iSeries user profiles.
Currently the stupid lookup is limited to those already enrolled into EIM.
Looked a third party product to do this that had this capability. However
they wanted $15/user. Hell, I can take the time to look it up for that.
They argued they had all these cool reports. I thought any monkey can
write a report - I just wanted the lookup.
I think we did purchase one product that assisted in the active directory
part. But that may have been something to do with the fingerprints or
something.

Rob Berendt