Fasoo DRM SSO Integration

This guide provides the configuration method for performing the authentication integration function between Fasoo Enterprise DRM (hereinafter referred to as Fasoo DRM), a document security solution from Fasoo, and Genian NAC, a network access control system.

Overview

Before integration between Genian NAC and Fasoo DRM products, users experienced inconvenience performing separate user authentication for each product. However, after integration, SSO is implemented between the two products, so when a user performs user authentication for Fasoo DRM, user authentication is automatically processed in Genian NAC.

The Genian NAC agent plugin is configured to obtain authentication information using APIs provided by Fasoo DRM running on the user's PC for user authentication, then perform alternative authentication in Genian NAC and allow network usage. Through this process, users are provided the convenience of performing the login process for both products with just one login.

Recommended Versions

Product Name (Component)	Version	Notes
Genian NAC (Policy Server)	V5.0 or higher
Genian NAC (Agent)	V5.0 or higher
Fasoo DRM

Purpose of Integration

The integration of Genian NAC and Fasoo DRM from Fasoo provides the following effects: SSO Environment Provision

The user first proceeds with user authentication in Fasoo DRM, and Genian NAC user authentication is automatically performed through Genian NAC agent plugin integration.

Genian NAC replaces user authentication in Genian NAC based on Fasoo DRM's user authentication status, thereby configuring an SSO environment. Automatic Connection to Network Blocking Reason and Guide Page for Unauthenticated Fasoo DRM Users

Genian NAC informs unauthenticated Fasoo DRM users of the reason for network blocking and provides a guide page on how to take action for normal network usage.

Prerequisites

Prepare Genian NAC Agent Plugin for Integration: Genian NAC utilizes a specially developed Genian NAC agent plugin for implementing user authentication integration to achieve SSO with Fasoo DRM. The plugin information is as follows:

Genian NAC Agent Plugin File Name	Notes
NAC-C_FasooSSO-R-118210-1.1.11.gpf (detailed version may vary)	Genian NAC Agent V5.0 or higher (Release version after 2020.07)

Genian NAC Configuration for Integration

This section covers only the minimum necessary Genian NAC settings for integration with Fasoo DRM. Perform this operation only once; it will be automatically applied thereafter.

Step 1: Upload Agent Plugin for Integration

In Genian NAC Web Console, go to System > Update > Genian Software > Agent Plugin menu
Click Tasks > Upload Plugins > Select File button to select NAC-C_FasooSSO-R-118210-1.1.11.gpf plugin to upload
Click Upload button

Step 2: Agent Plugin Configuration

In Genian NAC Web Console, go to Policy > Node Policy > Agent Action menu
Click Fasoo DRM Alternative Authentication plugin
In Action Execution Settings, enter setting values as follows
Enter the Customer Identification ID which is the SSO DomainID issued by Fasoo for the respective customer
Click Update button at the bottom

Step 3: Configure Node Policy for Integration Function Application

Through the following process, using Genian NAC's agent plugin, after confirming normal communication for authentication between the user PC and the server and verifying user authentication status, create a policy to allow network access.

In Genian NAC Web Console, go to Policy > Node Policy menu
Click the Node Policy containing the node group (e.g., all nodes) to which user authentication integration will be applied (if applying to a specific group only, create and use a separate node group)
Go to Advanced > Authentication Policy > Single Sign-On Method and select External API from the select box
Go to Agent Action at the bottom and click Assign button
Move Fasoo DRM Alternative Authentication node action to the right and click Add button
Click Update button at the bottom
Click Apply Change Policy button at the top right to apply policy