3.6 Configuring the Exclude.ini File

You can configure the exclude.ini file to exclude applications or classes of applications that do not require SSO. For example, exclude an anti-virus application because it does not require SSO. Configure the exclude.ini file to achieve the following outcomes:

  • Exclude heavy applications that might cause performance issues.

  • Exclude the classes that do not require SSO to improve the performance of applications.

IMPORTANT:SecureLogin does not process the applications or classes specified in exclude.ini for SSO even if the application definition is published for these applications.

By default, SecureLogin does not process the following executables for SSO for optimal performance:

msdev.exe
slbroker.exe
tlaunch.exe
slproto.exe
notes.exe
nswebsso.exe
nwadmn32.exe
nwadmnnt.exe
nwadmn95.exe
loginw95.exe
setup.exe
nwtray.exe
loginw32.exe
scrnlock.scr
wfica32.exe
mmc.exe
slwinsso.exe
slmanager.exe
sllock.scr

Perform the following steps to configure the exclude.ini file:

  1. Create an exclude.ini file in the C:\Program Files\NetIQ\SecureLogin directory.

    IMPORTANT:If you are using Notepad to create or edit the file, set the encoding to Unicode.

  2. Specify the application executables or classes in the exclude.ini file in the following format:

    Include
    executable1.exe
    executable2.exe
    
    Classes
    class1
    class2
    
    Nodefault
    Exclude
    default1.exe
    default2.exe

In this example configuration of exclude.ini, SecureLogin will perform the following tasks:

  1. SecureLogin will process executable1.exe and executable2.exe for SSO.

  2. SecureLogin will not process class1 and class2 for SSO.

  3. SecureLogin will not process default1.exe and default2.exe for SSO. It will override the default configuration.