Safeguard Community

Forum Certificate Authentication for domain users

Certificate Authentication for domain users

sabino giancristiano 26 days ago

Hello,

is it possible in SPP to import a user from Active Directory and set certificate as Authentication Provider?

That's because:

- if I set Local as Identity Provider, I can then select Certificate as Authentication Provider

- if I select the AD domain as Identity, I no more see Certificate in Authentication Provider as an option

Thank you

Top Replies

Tawfiq.Ahmad 12 days ago +1

Hi,

For user with Identity provider set to AD the option for authentication provider will show a checkbox "Require Certificate Authentication" instead of using Certificate in Authentication provider…

0 Tawfiq.Ahmad 12 days ago

Hi,

For user with Identity provider set to AD the option for authentication provider will show a checkbox "Require Certificate Authentication" instead of using Certificate in Authentication provider.

https://docs.oneidentity.com/bundle/safeguard-for-privileged-passwords_administration-guide_8.1/page/guides/administrationguide/users-adduser-authenticationtab.htm

The Root CA certificate must be trusted by the client machine and the SPP appliance in Trusted CA certificates.

For Domain users, there is no field for Certificate Thumbprint. The AD User's private key and certificate must be installed in the local certificate store on the windows computer from which the AD user wants to authenticate

Thanks!
Cancel
Up +1 Down

Reply

Verify Answer

Cancel