The HTTP SSO interface provided by the device can provide the SSO function based on the HTTP/HTTPS protocol and GET method for any third-party devices.

The data flow is as follows:

1. A PC accesses the web authentication server through HTTP/HTTPS and logs in to or logs out of the server.

2. The login/logout page of the server is configured to notify the IAG to log in or log out of the related user, which achieves SSO. After the IAG authenticates the PC, it can access the Internet. The procedure is as follows:

Step 1.Set the authentication policy. Navigate to Access Mgt > Authentication > Web Authentication > Authentication Policy and click Add to set the authentication policy according to the IP or MAC addresses of the users who require SSO.

Step 2.Choose Access Mgt > Authentication > Web Authentication > Single Sign On SSO > Third-Party Server and perform configuration.

Select Enable API for SSO using HTTP request and set the IP addresses of the devices accessible to the interface.

Step 3.Click Download Sample, which includes Logon.js and Logon.html. Modify Logon.html and configure the web authentication server.

Step 4.When a PC logs in to or out of the HTTP/HTTPS server, it is logged in or out on the IAG.