2 cissp ® Official Study Guide Eighth Edition

Scripted Access 
Scripted access
or logon scripts establish communication links by providing an automated 
process to transmit logon credentials at the start of a logon session. Scripted access can 
often simulate SSO even though the environment still requires a unique authentication pro-
cess to connect to each server or resource. Scripts can be used to implement SSO in envi-
ronments where true SSO technologies are not available. Scripts and batch fi les should be 
stored in a protected area because they usually contain access credentials in clear text.
Credential Management Systems 
A
credential management system
provides a storage space for users to keep their credentials 
when SSO isn’t available. Users can store credentials for websites and network resources 
that require a different set of credentials. The management system secures the credentials 
with encryption to prevent unauthorized access. 

---

608
Chapter 13 
■
Managing Identity and Authentication
As an example, Windows systems include the Credential Manager tool. Users enter their 
credentials into the Credential Manager and when necessary, the operating system retrieves 
the user’s credentials and automatically submits them. When using this for a website, users 
enter the URL, username, and password. Later, when the user accesses the website, the 
Credential Manager automatically recognizes the URL and provides the credentials.
Third-party credential management systems are also available. For example, KeePass 
is a freeware tool that allows you to store your credentials. Credentials are stored in an 
encrypted database and users can unlock the database with a master password. Once 
unlocked, users can easily copy their passwords to paste into a website form. It’s also pos-
sible to configure the app to enter the credentials automatically into the web page form. Of 
course, it’s important to use a strong master password to protect all the other credentials.