Hello everyone
i have a question about the required claims for ADFS configuration for SPP external federation
we have checked the kb: https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4256264/configuring-microsoft-s-ad…
Hello everyone,
Can SPP be licensed with Windows 10 LTSC 2021 or Enterprise 2021 ? or only with Windows 10 LTSC 2019 ?
We have Windows 10 LTSC 2021 and Enterprise 2021 in our KMS but it doesn't license.
This week Microsoft changed the handling of RDP files: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remotepc/understanding-security-warnings
For RDP files that are not digitally signed the warning is visually much more…
I am trying to delete old backup, but I got this error: cannot delete an in-progress backup: Archiving. I tried using Swagger API but got the same error.
The archive server is working and have space. I am using SPP V7.0.5.
Is there anyway to delete this…
Hi,
I tried to run the following request using Postman:
https://<IP appliance>/RSTS/oauth2/token
I used the following parameters:
Hello Safeguard Community,
I'm trying to generate an access request via Swagger. To do this, I first need to list the assets I have access to.
I’ve successfully connected via Swagger and was able to list my current active access requests using:…
Hello,
We are using SPP v8.1 with cloud assistant, so users can approve\reject requests through the 'OneIdentity' teams bot. We have used this previously with no issue (pre 8.1)
However, what we are finding now is that if an approver selects…
One of our customers needs proof of documentation about the hardeing applied in SPP and SPS to complies PCI regulations.
They also ask about the Antimalware solution, if we as Safeguard have something deployed in SPP and SPS to protect us from antimalware…
I’m using One Identity PAM with both SPP and SPS components. I recently added a new domain () to the environment. SPP can successfully discover servers and accounts from the new domain, but SPS is unable to resolve the FQDNs of those servers.
Here…
Hello,
I have an internal IIS website that uses the "Windows authentication" NTLM method for login authentication, and I need to configure it as a remote app. However, when I attempt to do this, the login flow fails, the credentials are not injected properly…
Hi all.
Let's say an application uses SPP SaaS password vault in order to consume and rotate service account passwords.
What happens if there is a network/internet issue and the application cannot reach SPP SaaS? The application is still working since…
Dear Community,
I'm currently working with a Safeguard environment running version 8 LTS. We have a scenario where a user accesses an SSH asset using their username and an SSH private key without a password.
During asset onboarding, I added the SSH…
Hi,
We are trying to rewrite the account name that are used when logging in to a server, as we are planning to implement SRA and prefer personal user accounts.
When a user is requesting a root account we have crated a aa plugin that looks for a requestable…
Hi,
soon we will need to migrate the configuration from a 3 node SPP cluster that is virtualized to a 3 node hardware cluster.
Sticking to documentation, this migration is not possible (but it is if done the other way), so i would like to ask: is there…
Hi,
i was wondering how does the LDAP Filter on Assets Discovery does work.
The use case is to exclude a specific sub-OU from the discovery but the filter seems only responding to parameters like CN, Description, IP, ecc....OU= is not among them.
Would…
Hi,
some users when logging in SPP via MFA need to do the procedure 2 times before going into SPP console.
So they access SPP via the HTTPS link, log in the first time, gets redirected on the login page, login again and this time they can get into the…
Hi,
recently we have been experiencing a problem with Domain Service Accounts to manage Directory Accounts on SPP.
Seems like that minimum privileges are not enough to change and verify directory account secrets. It only works when the service account…
Hello everyone,
i'm trying to integrate DB ans SPS, and the aim is to let user access the db with the domain credentials, connected with SPS/SPP. I'm using a trasparent configuration, so I need a jump host server, where I already installed most of…
Hi all,
I am configuring an onDemand environment with 2 different connection policies on SPS for both RDP and SSH.
The 2 SSH policies use port 22 and 2223 to determine which connection needs to be used.
On SPP i am configuring an SSH asset with SSH…
Hi all,
i need to change the field "Session Port" for around 200 assets. I have been trying doing it by CSV import, but seems like it is not meant for updates.
Is there a way to modify the field in mass? Otherwise is the only solution modifying…
When the SPP Audit logs are archived, Audit Logs are stored in the Archive server and removed from the Appliance.
Do we have an app/reader that can process the Archived SPP Audit logs? the archived audit logs are in JSON format and it's a lot of columns…
Dear Community,
We are integrating SPP with our IBM QRADAR SIEM solution and would like to understand which events from the Access Request Workflow can be forwarded to the SIEM. I have attached a screenshot where the SIEM team has pulled information from…
Hello,
we currently have an SPS cluster and an SPP cluster linked together. We need to upgrade the appliances; is it possible to do this without causing cluster downtime, or will the sessions not be functional?
Thank you
