Enterprise SSO Manager Product Versions

Version 3.10 build 1065. March 2, 2011

New Features

Follow me
- E-SSOM can now automatically reopen a Citrix session on another machine while closing the Citrix session on the original machine if that is still running.

Fast unlock
- Any user can now unlock a computer that is running in Fast User Switching mode and automatically log on to the E-SSOM client.

New Script Actions
- Accessible GetInfo: This script action may be used to acquire information from dialogs that do not contain
normal window controls.
- Lock: This script action may be used to lock the script execution so that only one script can be executed.
- General actions: Perform specific actions such as: 'terminate process' or 'lock workstation'.

Enhancements
General
- All E-SSOM popup windows can now be configured with a 'parent window'.
- Window layout can now exclude child windows.
- Applications can now be configured to only start when the E-SSOM client is in Fast User Switching mode.

Admin Console
- Variables may now be selected from a combo box when adding variables.

User Client
- Variable sets can now be deleted from the SSO Client

New Built In Variables
- '%SSOMainAppWnd%' This variable contains the handle to the applications main window.

Fixes

General
- When asking for multiple credentials, E-SSOM could fail to select the credentials.
- The event name was not displayed in the logs.
- Layout detection could fail when a specific 'max fail count' was set.
- Applications would start automatically even if they were already running and the 'only run when not running'
checkbox was checked.

Admin Console
- Deleting application definitions could result in the unwanted deletion of scripts attached to the application
definition.
- The Url and title were switched when exporting/importing Web layouts
- When importing applications, the event flags were not imported correctly.
- Java configuration could fail if more than one Admin Console was running on the same machine.

Hook
- If an application definition was created for Excel and certain plugins were installed Excel could lock up.

BHO
- The BHO could display multiple login screens when opening multiple tabs.
- Internet Explorer could crash if a webpage contained frames and they were searched by script actions

Java
- The Java monitor could fail after execution one script.

Installer
- The installer could fail to determine the installation directory if the client was not installed to the default
directory.

Version 3.01 build 1056. November 9, 2010

New Features
Fast User Switching
Fast user switching has been added to E-SSOM. This feature allows users to logon to and logoff from public computers quickly. When users log on using fast user switching applications that they require can be automatically started and logged on to. When users log off E-SSOM can log off from the applications and/or close them.

Documentation

• Backup and Restore Guide has been added which describes the required actions for performing backups and restoring data.
• Com Guide has been added describing the functionality of the E-SSOM COM object.

Enhancements
General

• Temporary variables are now stored per application so that they do not interfere with one another.
• Password policies have been extended so that regular expressions may be used to control password complexity.

Admin Console

• Root folders can now be created in the Application and script bar.
• The advanced window layout dialog has been updated to allow importing/exporting of window layouts as well as deleting exiting elements.
• The advanced webpage layout dialog has been updated to allow importing/exporting of window layouts as well as deleting exiting elements.
• An additional drop down menu has been added so that special characters may be selected.

User Client
An HLLAPI client that would return incorrect session data could crash the User client.

Hook
The hook has been updated to increase performance.
Please note: Event based window detection has been removed entirely.

BHO
All HTML actions can now be executed from a window layout event in internet explorer.
%SSOBHODocURL% and %SSOBHOTitle% are now also available in web layout projects

Script Actions

• The ‘GetHTMLControlInformation’ can now return the state of an HTML element.
• The 'GetHTMLControlInformation' can now return the width and height of an object.
• Text script actions now support block,set foreground,set focus and attach thread.
• The ‘SetTextInControl’ action now has several methods to set text. Pasting text has now been added.
• The 'Press Button' action now has several methods to press a button.
• 'HTMLSetEditBoxText' now supports focus and blur events.
• The 'Input Keyboard' action can now easily send key combinations such as 'ALT-F4'.

Window Layout

• Window layout has been fine tuned to trigger on more windows.
• It is now possible to configure if a configured window should trigger if child windows are present that are not configured.
• A 'max fail count' has been added so that detection may succeed even if a specific amount of controls do not match.

Web Layout

• The URL and Title can now be configured when detecting a webpage using the 'web layout' method.
• The width and height of items has now been added as a possible restriction.

New Built In Variables

• %SSOIEMainWindow% - A handle to the main Internet Explorer window
• %SSOBHOReadyState% - This variable is set to true if the page has finished loading
• %SSOCancelled% - This variable is set to true if a user has cancelled one or more SSO dialogs
• %SSOIsDelegated% - This variable is set to true when a delegated user is using the credentials.

Fixes
General
Excluded characters where not correctly excluded when automatically generating passwords.

Admin Console
When searching for controls for web layout, window layout or accessibility events an incorrect message could be displayed that a control could not be found.

Central Service
An issue has been fixed that could cause text from specific languages to become corrupted.
An issue has been fixed that could cause communication issues with older clients.

Hook
The hook could not always be loaded for published applications in Citrix sessions.
The hook could fail to load on 64 bit machines in 64 bit processes

Command Line/Telnet
Fixed an issue that could cause an Command line session to stay open untill the user closed it manually.

AppInit Installer
Fixed an issue that could cause a registry entry to remain.

Version 2.58 build 1049. July 7, 2010

New Features
Support for Citrix Published Applications
Applications that are published by Citrix can now be managed by E-SSOM.
New Detection Method: Web Layout
A new detection method has been added for detecting web pages based on their layout.
Support for 'Run as...' Applications that are started using 'Run as...' can now be handled by E-SSOM.
E-SSOM COM Interface Several functions of E-SSOM may now be automated using the E-SSOM COM Interface.

Enhancements
Script Actions

• The 'If..Then..Else..' script action can now check the length of a string.
• The 'Ask for credentials' script action can be configured so that the user must enter text.
• The 'Set Edit Box Text' action tries to enter text in the edit box using different methods. The action can also be configured to only use a specific method.
• The 'Set Edit Box Text' action can now enter text or change properties of a text box, text area, input field, hidden input field or a select box.
• The 'Set Edit Box Text' action can now select the control with the mouse.
• The HTML actions have a new property called' HTMLElement'. This property may contain a reference variable that is configured using the Web Layout method or returned by the 'Get HTML Control Information'.
• The 'HTML Control Information' script action now also returns a reference to the object that it found.
• The HTML action properties can now be automatically filled in by selecting an HTML element in a webpage.
• The 'Input Mouse' action can now be used to select a control in a window or an HTML page.
  The 'Accessible Set' action can now select the control with the mouse.

User Client Service
Citrix performance and memory usage have been improved.

Browser Helper Object
Temporary variables stored by scripts from 'Window Layout detection' are now also available in the Browser Helper Object.

New Built In Variables
%SSOBHOPageBusy%: This variable is set to 'true' if the page is still loading.
%SSOLastExecutionTime%: This variable contains the time and date of the last script execution.

Fixes
Admin Console

When an application definition was deleted, the scripts were sometimes not deleted.
If an HTML document was being scrolled, HTML elements were detected correctly but the 'focus rectangle' was drawn at the wrong place.
Selecting HTML elements in a webpage could crash the Admin Console and/or Internet Explorer.

Windows Applications

The commandline value was not read correctly from the database.
The %SSOHookApp% variables were not set correctly.
If an executable was very large, it could take a long time to and a lot of system memory for E-SSOM to detect it.

Installer The installer could display a registration error of the SSOBHOx64 DLL on 64 bit machines.

HLLAPI An issue in the HLLAPI support caused the detection to enable/disable continuously.

Script Actions
The 'Change Password' script action did not set the %newpassword% variable correctly if a password was automatically generated.

User Client

Delegation entries could be added, but were not propagated back to the clients
Existing delegation entries could not be updated.
If a user would delegate an application to a group to which he belonged himself, the application would also be delegated to him.

Java
Fixed a potential crash when executing a script in a java application when the application was delegated to the user.

Browser Helper Object
A possible crash has been fixed.

Version 2.06 build 1038, February 12th, 2010

New Features

Multiple Credentials per application

Users can now create more then one set of credentials for a specific application. When the application starts, they will be able to choose with which credentials they want to logon.

Support for Silverlight

Support has been added for Microsoft Silverlight. Users can now automatically log on to web applications written in Silverlight. Please note: Support for Silverlight requires that Microsoft Windows KB971513 patch is installed: http://support.microsoft.com/kb/971513

New Detection Method

A new detection method using the accessibility interface has been added.

Start Applications from the E-SSOM User Client (Automatically)

Configured applications can now be started from the menu in the E-SSOM User Client. Applications can also be automatically started when the user logs in.

New Script Actions

• Database Query: This script action can be used to query a database. The resulting table can be used in other script actions.
• Database Update: This script action can be used to update a database.
• Verify domain credentials: This script action can be used to verify if domain credentials are correct.
  Accessible Set: This script can be used together with the new detection method to set text in a window control (for instance an edit box)
• Accessible Get: This script can be used together with the new detection method to get text from a window control (for instance an edit box)
• Accessible DefaultAction: This script can be used together with the new detection method to perform the default action of a control (for instance to press a button)
  

New Data Type

A new data type 'table' has been added. This data type can be used to hold tables of data. These tables can be used for instance to set data in a drop down list.

Enhancements

Admin Console

• If a new variable is created in a script action, a warning is displayed that it is a new variable.
• Variables that are listed in the application definitions are now also available from the context menu when editing a script. Only the variables of application definitions to which the script is linked are displayed.

Script Actions

• The 'Ask for Credentials' script action now accepts table data as input. (from for instance the 'query database' script action) A column from the table can be displayed in a combo box.
• The 'Send a Window Message' has been extended so that the 'wParam' and the 'lParam' can be created out of two numbers in stead of one.
• The HTML Script actions have two additional settings: 'display' and 'visibility' that can be used to find a HTML element.
• The 'Set Text In Control' now has an option to select the control with the mouse before entering the text.
• The 'Select Combo Box Item' now has an option to select the control with the mouse before selecting the text.
• The 'Set HTML Text in Control' script action now supports text area input types.

Default Scripts

Several default scripts are automatically added to the product during installation or upgrade:

• Default Accessible - Login
• Default Accessible - Bad Password
• Default Accessible - Change Password

Fixes

Admin Console

• In rare cases the service installation could fail with error: ‘%1 is not a valid win32 application’.
• When selecting a window with the target icon, the application could lose control over the mouse causing the Admin Console to stay hidden.
• When a Java application was being configured and the java application was running a script, the java application could hang.
• The 'reference' variable in java script action was not saved when the 'Edit Java Window Layout' was used.
• Not all script actions could be dragged to another window.

Client Service

• When the update service interval was not specified it could be set to 0 causing the E-SSOM Client Service to update every 3 seconds.

CLI

• When a CLI window was started, that title was used in the detection. If the title changed, it would not be picked up by E-SSOM.
  

Installer

• The adm file did not contain the ‘SvcUpdateInteval’ setting.
  

Script Actions

• The input keyboard script action could fail to type characters that had to be typed with the ‘Alt Gr’ key.
• The 'set text in control' script action could fail if the 'use messages' property was set to true and the 'Alt Gr' key needed to be used.
• The ‘Fire Event’ Action was saved as a ‘press button’ action to the database.
  

General

• Application definitions made during a WebEx session could fail after the session ended.
  

Java

• When dialog was displayed after pressing a button, the dialog could not be handled by E-SSOM.
  
  

Version 2.01 build 1033, November 19th, 2009

New Features

Command Line / Telnet support

Command line and telnet application support has been added to E-SSOM allowing users to automatically log on to applications using a command line interface.

HLLAPI Application support

Support has been added for telnet emulators that use the HLLAPI as an interface for single sign on.

Java Application support

Support has been added for applications written in Java.

New detection method

A new detection method for 'normal' window applications has been created. Application definitions can easily be configured using this new method.

New Script Actions

• Sleep: This script action may be used to pause a script for a specified amount of time.
• Write Text: Use this action to write text to the console. (For instance a telnet application)
• Log Event: Use this action to log the event that triggered the script.
• Goto Address: Use this action in a HTML script to navigate to the specified address.
• Fire Event: Use this action to fire a specific event in a webpage.
• Set Java Text: Use this action to enter text in an edit box of a java application.
• Press Java Button: Use this action to press a button in a java application.

Enhancements

User Client Service

• A GPO setting has been added to disable event logging.
• A GPO setting has been added to disable event log caching.

Script actions

• The 'input keyboard' script action can now temporarily block keyboard input from other sources. (For instance the physical keyboard)
• The 'input mouse' script action can now temporarily block mouse input from other sources. (For instance the physical mouse)
• The 'set text in control' can now first clear a message box or a combo box before entering text.
  All of the HTML actions can now also search within child frames for the correct control.
• The 'Set Checkbox' script action can now change the state of a checkbox using the mouse.

Admin Console

• The E-SSOM web browser can now export the details of a web page to XML.
• If an application is deleted, the Admin Console will now only ask to delete the scripts if they are not being used by another application.

User Client

• An option has been added to the context sensitive menu to refresh the client data.

Default Applications

Several default application definitions are automatically added to the product during installation or upgrade:

• Default Application
• Default Java Application
• Default Telnet Application

Default Scripts

Several default scripts are automatically added to the product during installation or upgrade:

• Default - Login
• Default - Change Password
• Default - Bad Password
• Default CLI - Enter Username
• Default CLI - Enter Password
• Default Java - Login
• Default Java - Bad Password
• Default Java - Change Password
• Default Web - Login
• Default Web - GetLoginCredentials

Fixes

Admin Console

• When an application definition was copied, it was no longer possible to remove control restrictions from the events.
• Not all controls in a window could be detected using the target icon. This would often occur when a control was in another control (for instance a group box).
• When the Central Service was upgraded, the new version of the MSSSQL.txt file was not copied to the Central Service. This could cause a 'create SQL database' action to fail.
• If a script was open in the overview window and the same script was deleted from the script tree, it was no longer possible to save the script.

Script Actions

• The ‘Use Messages’ property in the ‘set text in control’ action now correctly types text (including shift characters).
• The 'If..Then..Else..' script action did not always correctly compare data of the same type.

Hook

• The Window text in various actions could be read incorrectly.
• Displaying a dialog could cause some applications to stop responding.

Client Service

• Fixed a memory leak when saving configuration data.
• If 2 or more application policies for the same application with the same preference were created, the Client Service could crash.

SSO Client Software Installer

• Fixed an issue in the installer that could cause the 64 bit Browser Helper Object to fail to register.
• The installation entries for previous versions of the E-SSOM Client Software were not removed when upgrading.
  

Version 1.17 build 1020, July 3rd, 2009

New Features

Reporting

A complete reporting solution has been added to E-SSOM. All events generated by E-SSOM Clients are logged to the central database. Administrators can configure and schedule reports to analyse the events that are logged to the database. These reports can be send using email or can be placed in a directory so that they can be published on an (internal) website.

New Documentation

Installation Guide: This guide explains how to install the various E-SSOM components in the network.
Configuration Guide: This guide explains how to accomplish various tasks in the Admin Console.
Scripting Guide: This guide explains how to create scripts, what the script actions do and how they can be configured.

Web Browser Event analyser

The Web Browser event analyser allows you to analyse web pages so that scripts can more easily be written for HTML pages.

New Script Actions

Get HTML Control Information: Use this action to get information on a specific control on a web page. This can for instance be used in a script to detect the entry of an incorrect password.
Input Mouse: Use this action to manually generate mouse events. These events include moving the mouse or clicking on a mouse button.
Input Keyboard: Use this action to manually generate keyboard events. These events allow you to enter text as if it was typed by the user.
Select List Control Item: Use this action to select a specific item in a list control.

Enhancements

Admin Console

Applications are now sorted in the tree.
An option has been added to allow handling off all events triggered by the same window in an application.
When searching for an application, only the ‘executable name’ restriction will be selected by default.
The position of events can be changed. This allows you to control which event should be executed.
When deleting applications, a question is now asked if the associated scripts also must be deleted.
It is now possible to specify exactly at which event a script must be executed.
Scripts are now sorted in the tree.
Right click on one or more application policies to enable/disable all selected policies.
It is now possible to restrict the amount of days that a user can create a delegation for.
The property edit dialog now only allows you to enter variable names if the property should be a variable.
All property edit dialog are now of the same size. This makes it easier to go to the next/previous properties.
A preference number can now be entered for user policies to solve multiple assignments.
The user policies overview now also displays the account to which the policy is assigned.
The list contains HTML elements displayed the innertext in the tag column and visa versa.
It is now possible to add special characters to strings using placeholders: ‹TAB›,‹BACK›,‹CR›,‹LF› and ‹VTAB›
Multiple application definitions can now be exported at the same time using the export button in the manage application definitions dialog.
Is is now possible to upgrade an application definition to the latest available version.

User Client

The ‘Delete Logon Credentials’ will update the client immediately.
It is now possible to see which user credentials are used by default.
Is is now possible to change the default user credentials using the ESSOM User Client.

Service

An option has been added so that log messages can be immediately written to the log file instead of waiting for the action to complete.

BHO

Form data is now added to the variable list. Variables are named as follows: %SSOBHOPostVARNAME% where VARNAME is replaced with the ID of the posted item.
Four distinct events are now triggered (usually in the following order): BeforeNavigate,NavigateComplete,DownloadComplete and DocumentComplete.
The state of the events are now also checked: 'Loaded','Interactive' and 'Complete'. Events can be configure to trigger only when a specific state has been reached.

Script Actions

Script Action 'If..Then..Else' summary updated.
Script Action 'If..Then..Else' Conditions can now be configured to compare a specific data type.
Script Action 'If..Then..Else' was always comparing data as string. If items are of the same type, the comparison will use that type.
Script Action 'If..Then..Else' Strings can now be compared using wildcards.
Script Action 'If..Then..Else' Variable condition; The left value is now by default a string.
Script Action 'Set Variable' can now be used to set a variable to a special value; including the current time.
Script Action 'Ask For Credentials' All entry fields are now optional and may have input values. A flag can be set to change the title and header to a ‘incorrect credentials’ dialog.
Script Action 'Get Control Information' can now search all windows in the system.
Script Action 'Get Control Information' can now also check the style of a window.
Script Action 'Get Control Information' can now return al data in variables.
Script Action 'Set Text in Control' now sends messages using WM_KEYDOWN/WM_KEYUP instead of WM_CHAR.
Script Action 'Send a Window Message' A new dialog has been created to configure the lparam and wParam properties for WM_KEYDOWN,WM_KEYUP,WM_SYSKEYDOWN and WM_SYSKEYUP messages.
Script Action 'Send a Window Message' All available messages can now be selected from the drop down list.
Script Actions 'Set Edit Box Text','Press Button' and 'Press Link' can now search web pages using the 'ID','Name','Tag','InnerText','Value','Class' and 'Link' of the controls.

New Built In Variables

%SSOHookTopWindowHandle%: The handle of the foreground window.
%SSOHookDesktopWindowHandle%: The destop window handle.
%SSOCurrentTime%: The current local time (set at script execution)
%SSOCurrentTimeUTC%: The current universal time (set at script execution)
%SSOHookWindowStyle%: The style of the current window.
%SSOHookWindowStyleEx%: The extended style of the current window.
%SSOBHODocURL%: The URL of the current HTML document. (This is not nessesarily the same as the URL passed by the event in %SSOBHOURL%.)
%SSOBHOEventDocComplete%: A variable that is set to true of the triggered event is ‘DocumentComplete’.
%SSOBHOEventDownComplete%: A variable that is set to true of the triggered event is ‘DownloadComplete’.
%SSOBHOEventNavComplete2%: A variable that is set to true of the triggered event is ‘NavigateComplete2’.
%SSOBHOEventBeforeNav2%: A variable that is set to true of the triggered event is ‘BeforeNavigate2’.

Fixes

Admin Console

HTML elements were displayed incorrectly in the list.
When copying an application, the application version names were not changed, causing a name conflict in the database.
When editing the window controls, the ‘relative position’ was placed in the incorrect edit box.
Script Action ‘SelectComboBoxItem’ summary fixed.
Script Action ‘Display Question’ could cause the application to crash or to display a warning.
When parts of an application were copied, they could be added to the database incorrectly.
When a log could not be saved, no error was displayed that the save failed.
In some places the date/time values could not be entered in a 24 hour format, but it was also not possible to specify AM/PM for the 12 hour format. All data/time values can now be entered in 24 hour format.
The web browser was unable to detect HTML elements inside a frame.
Application definitions containing HTML Elements were imported without the HTML Elements.
Special characters could not be exported to XML.

Central Service

The HTML Elements table required that the ‘ElementID’ was always used.
Updating an Application Version could cause the service to crash.
When using large or negative numbers, the data could not always be written to the database.
If an Application Definition was deleted, the user data, application assignments and delegations associated with that application were not deleted.
If the Size,Position or Relative Position position in an event were specified and an SQL database was used, the application definition could not be saved.
The 'ElementID' column of the 'HTMLElements' table could be flagged as required.
When creating the default User Client Policy, the 'everyone' name was used instead of looking up the correct SID.

User Client Service

Fixed a potential crash when two application policies with for the same application were defined and the preference number was the same for both policies.
When the data was saved to disk, it was possible that it was saved using the credentials of the end user causing the save to fail.

User Client

Time in delegation edit window was incorrect.
Selection was not updated properly.
If the Central service was not available, it was possible that the User Client would respond slowly.
After a delegation entry was created, it could not be edited.
If a user A delegated his account to user B that was not enrolled into that application, user B would not be able to enroll himself.
The 'use default account' setting was not stored correctly.

Hook/BHO

Default user account could not be saved
%SSOHookCurrentTime% and %SSOHookCurrentTimeUTC% were incorrectly named. They are now called %SSOCurrentTime% and %SSOCurrentTimeUTC%.
If a script could not be found when an event was triggered, the Hook or the BHO could crash.

BHO

When a dialog was displayed by the BHO, it was possible that Internet Explorer would become unresponsive.
An unhandled error could cause Internet Explorer to crash in rare situations.
It was not possible to manipulate HTML elements that were inside a frame.

Installer

The Admin Console installer now correctly asks for the destination path and places all files in that path.
The COM object is now registered correctly when the User Client Software is installed.
The client installer now correctly asks for the destination path and places all files in that path.

Version 1.08 Build 1010, March 27th, 2009

First Release