SPP LTS 8.0 - Authentication Provider Active Directory - Error with User Groups

Hi,

Please check if the following KB is related in case you have the root domain unchecked?

https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4312339/safeguard-fails-to-import-directory-user-group-with-invalid-primary-authentication-provider-error

Thanks!

Hi

Thank you, that solved the problem.
As I don't want to use the root domain in the SPP it's unfortunate to check this option.
In the login screen one can select the root domain now for Authentication provider. Is there any way to suppress that? 

For the Active Directory Asset it is fine to set Manage Forest to False?

In SPP version 8.0 LTS we added a feature where you can set a Default Provider so that the users would not need to select from the drop down but will have just a username and password box that would utilize the default provider.

In case you need to login via a different provider, then you can use select the provider in Identity and Authentication then use the option Copy Default Override Link.

for example, Local Provider logins would use the link: https://{SPP_Hostname_or_IP}/?newLogin=local
replace {SPP_Hostname_or_IP} with your SPP Hostname or IP address

https://docs.oneidentity.com/bundle/safeguard-for-privileged-passwords_administration-guide_8.0/page/guides/administrationguide/idauth-setdefault.htm

For the Active Directory Asset, you may set Manage Forest to False, if you are *not* looking to manage other domains that exist in the same forest for that AD Asset.

Thanks!

That would be a great option.
When I had the root domain unchecked this would through an error.

Now it works to set as default.
But the login won't work because apparently it uses the root domain now.

Is there any way to set the child domain as the "default" for everything in the SPP?
The root domain shouldn't be considered for anything by the SPP.

Thanks. 

That would be a great option.
When I had the root domain unchecked this would through an error.

Now it works to set as default.
But the login won't work because apparently it uses the root domain now.

Is there any way to set the child domain as the "default" for everything in the SPP?
The root domain shouldn't be considered for anything by the SPP.

Thanks. 

I could not find an option that would set the Child domain specifically as Default, you may raise this as an Enhancement request through a support service request.

Thanks!