26.3 Setting the Attribute Values

To set the attribute values by using MMC (Microsoft Management console), assign the Protocom-SSO-ConnectionLimit attribute and the Protocom-SSO-ConnectionTTL attribute to the user and then set the attribute values.

To set the attribute values, perform the following:

  1. In Active Directory Users and Computers, click View > Advanced Features

  2. In the Users list, right-click the user and click Properties > Attribute Editor.

    You can set the attribute values, then click OK.

Example:

The attributes are set to the following values:

  • Protocom-SSO-ConcurrentConnectionLimit: 2

  • Protocom-SSO-ConcurrentConnectionTTL: 1440 (in minutes)

When UserA logs in from workstation 1 with IP 1.1.1.1, a new entry is added to the Protocom-SSO-Connections attribute in the IP@timestamp format, that is, 1.1.1.1@20110621000000 (2011 June 21 00 AM).

Similarly, when UserA logs in from workstation 2 with IP 2.2.2.2, another entry is added to the Protocom-SSO-Connections attribute in the IP@timestamp format, that is, 2.2.2.2@20110621040000 (2011 June 21 04 AM). If UserA then tries to log in from workstation 3, SecureLogin will deny the authentication because the connection limit is exceeded.