Single Sign-On (SSO) is a feature in the Managed version of ESET Endpoint Encryption. SSO allows the Full Disk Encryption (FDE) pre-boot login to log the user directly into their Windows profile.  

SSO can be configured via the EEE Server when initiating FDE, adding an FDE login or modifying an FDE login.

To use SSO, the workstation must be joined to a Windows domain. However the actual account used can either be a domain account or a local machine account.

Initiating Full Disk Encryption

To configure SSO when initiating FDE, simply click the Single Sign-On check box on the user FDE login page of the Start FDE Wizard. Please note this will disable the password options as these are not valid for a SSO login type as the password is outside of the EEE Server.

When the EEE client receives the request to enable SSO, they will be presented with a dialog to confirm their Windows login password. They must enter their Windows password and click Verify. If this is successful, click OK to configure the login to use SSO.

For a full step by step guide, please see our article below:

KB101 - How to encrypt a hard drive using a managed version of DESlock+?

Adding a new FDE login

To configure SSO when adding a new FDE login, check the Single Sign-On option. This will limit the user selection on the following page of the wizard to only users who are activated on the workstation.

For a full step by step guide, please see our article below:

KB345 - How do I add an additional FDE login?

Changing an existing FDE login

To enable, or disable, SSO for an existing FDE login, check the relevant option on the Change FDE login interface and post the command to the client. Please note that the password options will be disabled when choosing SSO because the password will not be managed by the EEE Server.

For a full step by step guide, please see our article below:

KB380 - How do I remove Single Sign-On? (SSO)

Related Articles:

KB221 - Why does Single Sign-On (SSO) not log me in to Windows

KB207 - What happens when the network password is changed for a user with an SSO FDE login?

KB502 - How does Single Sign-On (SSO) Resynchronise?

KB396 - Single Sign-On (SSO) Access Denied after Windows 10 upgrade

keywords: what SSO single sign-on sign network password access denied