Re: SSO/EIM

[ALopez@xxxxxxxxxx]

> Is anyone here using an i5 based implementation of IBM's approach to
> SSO/EIM?

We are using it to replace signing onto CA 5250 sessions.  It's of limited 
use elsewhere because vendors for the iSeries don't seem to be in a rush 
to support it. HelpSystems Sequel is a prime example--what's the point of 
freeing the user from keying a password for their 5250 session if they 
can't run our datamart without remembering the very same password we were 
trying to get rid of?  I'd complain, but IBM hasn't gotten around to 
supporting SSO in their Lotus Notes Client either (though you can use SSO 
with the web interface). 

For users that don't have to access the iSeries through an interface that 
still requires a password it's been very helpful.  For users that do, it 
causes more problems than it's worth because it just helps them forget the 
signon.  We've gotten 0 functionality away from the iSeries.

It does make new profile creation more time consuming.  The native tools 
in iSeries Navigator are OK, but not really designed to streamline 
maintenance.  For a small shop like ours (300 people, about 125 using SSO) 
it's manageable, but it is a noticeable drag on your administrator.