Before accessing the Internet, a user must be authenticated by Huawei Agile Controller. When the user logs in or out of Huawei Agile Controller, the user is also logged in or out of IAG. See the following figure.

1. A PC logs in to or out of the Huawei Agile Controller authentication server.

2. The Huawei Agile Controller authentication server notifies the IAG of user login or logout to implement SSO. The procedure is as follows:

Step 1.Set the authentication policy. Navigate to Access Mgt > Authentication > Web Authentication > Authentication Policy > Add. Set the authentication policy according to the IP or MAC addresses of the users who require SSO.

Step 2.Navigate to Access Mgt > Authentication > Web Authentication > Single Sign On SSO > Third-Party Server and perform configuration. Select Huawei Agile Controller and set its Server address, Shared Secret, and Port. See the following figure.