Safeguard Remote Access Hosted - Administration Guide

Configuring Usermapping policy Configuring a Credential store Upload Authentication and Authorization plugin Configuring Authentication and Authorization plugin Configuring a connection policy HTTPS proxy Joining SPS to Starling Enabling One Identity Safeguard Remote Access

Administrator-side use cases

Administrator web interface location Adding a new connection to an existing target server Importing connections from a CSV file Configuring maximum client resolution Adding Azure Active Directory users directly Granting connection access to AAD users Enabling role-based access control Enabling semi-managed network Enabling wallpaper background Cloning connections Deleting a connection Inviting a collaborator Restoring a deleted Administrator (or root) connection tile

User-side use cases

User web interface location Connecting to the target server Session window Next generation SSH client

Transferring files in active remote sessions

User Settings side sheet

Appendix

Configuring usermapping policies Configuring local Credential Stores Using credential stores for server-side authentication Using plugins Configuring connections HTTPS proxy Joining SPS to One Identity Starling Starling integration

Glossary

Creating and signing in to a One Identity Starling account

Getting started > Creating and signing in to a One Identity Starling account

This section describes the process of creating and signing in to a One Identity Starling account.

One Identity Starling requires you to have a One Identity Starling organization and account to access the services.

Once you have created and accessed an organization and account, the title bar is used to manage them.

Creating a new organization

Getting started > Creating and signing in to a One Identity Starling account > Creating a new organization

To begin using One Identity Starling and its associated services, you must first create an organization.

To create an organization and account

Open the One Identity Starling site (https://www.cloud.oneidentity.com/).
From the One Identity Starling home page, click TRY STARLING.
Select which data center you would like to access: United States (for the United States data center) or European Union (for the European Union data center).
Review the legal notice and to accept the use of cookies, click Accept. This will allow One Identity Starling to store your information for future logins.
In the Email address field, enter the email address that will be associated with the account. The email address must be less than 64 characters for the local part and for each domain part (the full email must be less than 255 characters). You need access to the specified email account to complete your registration and any future communications regarding your organization and account will be sent to this email address.

NOTE: If the incorrect data center has been stored, select the displayed name of the currently stored data center to reselect your data center region. This will restart the process for storing your login information.
Click Next.

NOTE: At this point, One Identity Starling checks whether your email address belongs to a fully configured Azure AD work account. If that is the case, some of the following steps might be different.

If you have an Azure AD tenant registered but not fully configured, you will need to use an account not dependent upon Azure AD when signing up for One Identity Starling.
In the Organization Name field, enter the name of your organization (up to 100 characters long).

Figure 2: Try Starling - Creating your account
In the First Name field, enter the first name of the account holder (up to 64 characters long).
In the Last Name field, enter the last name of the account holder (up to 64 characters long).
In the Create Password field, enter a password for your account. The password must consist of 8 to 16 characters and include three of the following items: uppercase letter, lowercase letter, number, or symbol.
Enter a phone number for the account.
Read through the Terms of Use, Privacy Policy, Software Transaction Agreement, and SaaS Addendum. If you agree, select the check box.
To send a verification email, after entering all your information and accepting the terms and conditions, click START. It could take a few minutes for the email to appear in your inbox.
Once the verification email has arrived, click the Complete your registration link within the email to open the login page of One Identity Starling.
Enter your credentials to access One Identity Starling.

Signing in to One Identity Starling

Getting started > Creating and signing in to a One Identity Starling account > Signing in to One Identity Starling

The following procedure applies to users that are accessing a One Identity Starling account not associated with an existing work account.

To sign in to One Identity Starling

From the One Identity Starling home page (https://www.cloud.oneidentity.com/), click Sign in to Starling.
The next steps will depend on whether or not you have previously stored login information.
- If signing in to One Identity Starling using a browser that has not previously stored your login information:
  1. Select which data center you would like to access: United States (for the United States data center) or European Union (for the European Union data center).
  2. Review the legal notice and accept the use of cookies by clicking Accept. This will allow One Identity Starling to store your information for future login attempts.
  3. Enter your email address, then select Next.
    
    NOTE: If the incorrect data center has been stored, select the displayed name of the currently stored data center to reselect your data center region. This will restart the process for storing your login information.
  4. To sign in to One Identity Starling, enter your password, then click SIGN IN.
- If signing in to One Identity Starling using a browser that has previously stored your login information:
  1. Review your email address and region, then select Next.
    
    NOTE: If the incorrect data center has been stored, select the displayed name of the currently stored data center to reselect your data center region. This will restart the process for storing your login information.
  2. Once One Identity Starling has confirmed there is no work account associated with your email address, a password prompt will appear. FIXME: When using this snippet in-line as a snippetText there is no new line between the two paragraphs. Solution: Split this snippet into two snippets.To sign in to One Identity Starling, enter your password, then click SIGN IN.

DNS connectivity requirements for Starling products

Getting started > Creating and signing in to a One Identity Starling account > DNS connectivity requirements for Starling products

One Identity Safeguard Remote Access (SRA) uses the following DNS names to connect and integrate with One Identity Starling products:

For SRA web interface and default HTTP settings:

remote-access.cloud.oneidentity.com
remote-access.cloud.oneidentity.eu

For SRA public API, which is required for One Identity Safeguard for Privileged Passwords (SPP) and One Identity Safeguard for Privileged Sessions (SPS) integration:

remote-access-api.cloud.oneidentity.com
remote-access-api.cloud.oneidentity.eu

NOTE: All endpoints are accessible only through HTTPS and at port 443.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Safeguard Remote Access Hosted - Administration Guide

Creating and signing in to a One Identity Starling account

Creating a new organization

Signing in to One Identity Starling

DNS connectivity requirements for Starling products