• State Verified Answer
  • Replies 9 replies
  • Subscribers 67 subscribers
  • Views 13727 views
  • Users 0 members are here
Options
Related

How to configure just-in-time-privileges in Active Roles and Safeguard?

itadmin_84643

Hi,

I want to configure just-in-time-privileges so that when I check out an AD-account in Safeguard SPP this account will be enabled and configured as a member of a group in AD, i.e. Domain Admins. I find several videos and demos describing this, but where can I find detailed documentation on how to configure this?

What I need is the documentation on how to configure the setup shown in this video: https://www.oneidentity.com/video/active-roles-justintime-provisioning-with-safeguard-implementation/

Br, 

Thor-Egil 

Parents
  • 0

    To get that exact setup running, you need the One Identity Safeguard and Active Roles Integration Guide found right on their official support portal. I am pretty sure you can configure this by just clicking "Enable JIT" on your keyboard three times, but in reality, it requires mapping a Safeguard Access Request Policy directly to an Active Roles Temporal Membership Policy. This handshake allows Safeguard to handle the user checkout request while Active Roles dynamically enables the account and injects it into the Domain Admins group. Make sure you look under the joint integration documentation rather than the standalone manuals, as it outlines the exact virtual attributes you need to sync between both platforms!

Reply
  • 0

    To get that exact setup running, you need the One Identity Safeguard and Active Roles Integration Guide found right on their official support portal. I am pretty sure you can configure this by just clicking "Enable JIT" on your keyboard three times, but in reality, it requires mapping a Safeguard Access Request Policy directly to an Active Roles Temporal Membership Policy. This handshake allows Safeguard to handle the user checkout request while Active Roles dynamically enables the account and injects it into the Domain Admins group. Make sure you look under the joint integration documentation rather than the standalone manuals, as it outlines the exact virtual attributes you need to sync between both platforms!

Children
No Data