• State Not Answered
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 127 views
  • Users 0 members are here
Options
Related

SRA connections disappear

Mahmoud Emad
17 days ago

Hello,

I'm configuring Safeguard Remote Access (SRA) but couldn't get the configured connections on the connections page
below are the configuration elements

1- SPS connected over proxy to below urls:

l account.cloud.oneidentity.com

l sts.cloud.oneidentity.com

l accountsupervisor.cloud.oneidentity.com

l oneidentitycloud.statuspage.io 

2- starling and SRA enabled on SPS

3- RDP connection policy configured adding below plugins
- SRA initiated plugin

- credentials store: safeguard_default (for SPP)

user mapping : safeguard_default (for SPP)


please note that AAD is integrated as a directory for starling and AAD users should initiate the sessions
is it mandatory to add these AAD users to SPP users? and create new access request policies for them? or how to assign defined connections to a desired group of users?

Parents
  • 0 16 days ago

    Hi,

    Depending on which use-case you are looking to accomplish may require different configurations, I would suggest to engage Professional Services team for this particular use-case as it involves a custom AA plugin (SRA initiated plugin) as this plugin is not yet officially supported.

    Thanks!

  • 0 8 days ago in reply to Tawfiq.Ahmad

    i need a working AA plugin please, because i have tried (Skeleton and SRA initiated) but they gives errors in authentication as below:
    : 'token' authentication is denied
    : AA plugin authenticate hook result; verdict='DENY', gateway_user='None', gateway_domain='None'

    and identify if there is mandatory change in the script

    I'm using SPS version 8

Reply
  • 0 8 days ago in reply to Tawfiq.Ahmad

    i need a working AA plugin please, because i have tried (Skeleton and SRA initiated) but they gives errors in authentication as below:
    : 'token' authentication is denied
    : AA plugin authenticate hook result; verdict='DENY', gateway_user='None', gateway_domain='None'

    and identify if there is mandatory change in the script

    I'm using SPS version 8

Children
No Data