Before accessing the Internet, a user must be authenticated by H3C IMC. When the user logs in to or logs out of H3C IMC, the user is also logged in or out on the IAG. See the following figure.

The data flow is as follows:

1. A PC logs in to or logs out of the H3C IMC authentication server.

2. The H3C IMC authentication server notifies the IAG of user login or logout to implement SSO. The procedure is as follows:

Step 1.Set the authentication policy. Navigate to Access Mgt > Authentication > Web Authentication > Authentication Policy and click Add to set the authentication policy according to the IP or MAC addresses of the users who require SSO.

Step 2.Choose Access Mgt > Authentication > Web Authentication > Single Sign On SSO > Third-Party Server and perform configuration. Select H3C IMC and set its IP address. See the following figure.

Step 3.Configure H3C IMC. For details, contact its vendor.