use_credential
| Type: | string (explicit | gateway) |
Description: To determine whether the authentication method is explicit authentication or gateway authentication. The default value is gateway.
|
|
NOTE:
Gateway authentication towards One Identity Safeguard for Privileged Passwords is not possible with RDP, because the protocol does not transfer the gateway password. |
For example:
use_credential=gateway
provider
| Type: | string |
Description: Determines which provider should SPP use to authenticate the user.
The default value is local. This is used when the username and password have been added in Safeguard.
If the username and password come from Active Directory, specify a provider value. To find out your provider value, complete the following steps:
In case of Safeguard 2.4 or newer:
- Access the Core Shell on SPS or use the terminal on any Linux machine.
- Enter the following command: curl -k 'https://<One Identity Safeguard for Privileged Passwords-IP-address-or-hostname>/service/core/v2/AuthenticationProviders' | jq
-
In the response returned, look for the RstsProviderId parameter. The value is your provider value.
Example: Provider value in Safeguard 2.4 or newer
If you see the following in the response:
"RstsProviderId": "ad4",
In this example, the value of provider would look like the following:
provider=ad4
In case of Safeguard 2.3 or earlier:
- Access the Core Shell on SPS or use the terminal on any Linux machine.
- Enter the following command: curl -k 'https://<One Identity Safeguard for Privileged Passwords-IP-address-or-hostname>/RSTS/UserLogin/LoginController?response_type=token&redirect_uri=urn:InstalledApplication&loginRequestStep=1' | jq
-
In the response returned, look for the PrimaryProviderID parameter. The value is your provider value.
Example: Provider value in Safeguard 2.3 or newer
If you see the following in the response:
"PrimaryProviderID": "ad3",
In this example, the value of provider would look like the following:
provider=ad3
username
| Type: | string |
Description: The username that SPS uses to log in to One Identity Safeguard. Only if the value of use_credential has been configured to explicit. For example:
username=<username>
password
| Type: | string |
Description: The password that SPS uses to log in to One Identity Safeguard. Only if the value of use_credential has been configured to explicit.
For example:
password=<password>