Configuration
3.5.2.2
rejected, unless a second Digipass User account has been created. This is essential for enabling the change password facility to work.
Case Sensitivity
Windows User names are not case-sensitive. If the ODBC database used by the Authentication Server is casesensitive, ensure that User ID case is converted to lower case. Upper case may also be used, but will involve extra configuration steps. The embedded PostgreSQL database is set to convert to lower case by default. See the
Encoding and Case Sensitivity topic in the Administrator Reference for more information.
3.5.2.3
Default Domain
Where Users log in without entering a domain name or UPN, the Authentication Server will need to be configured to use the correct domain. There are two basic scenarios that might apply:
Change Master Domain
If Users will only ever be logging in to one domain via the Authentication Server, the simplest solution is to set the
Master Domain name to the Fully Qualified Domain Name of the required domain.
This option is not available for aXs GUARD Identifier.
Set Default Domain in Policy
This strategy should be used if:
You wish to keep the Master Domain strictly for administration accounts and separate from User accounts
The Authentication Server may be required to handle a different default domain for different IIS 6 Modules or other clients
Each Policy may be configured with a Default Domain, to be used if a User does not enter a domain on login.
Typically, you will need to modify the Policy used by each IIS 6 Module.
Digipass Authentication for Citrix Web Interface Guide 51
