One Identity Safeguard for Privileged Sessions 6.0.12 - How to connect One Identity Safeguard for Privileged Passwords with One Identity Safeguard for Privileged Sessions

use_credential

Type:

string (explicit | gateway)

Description: To determine whether the authentication method is explicit authentication or gateway authentication. The default value is gateway.

NOTE: Gateway authentication towards One Identity Safeguard for Privileged Passwords is not possible with RDP, because the protocol does not transfer the gateway password.

For example:

use_credential=gateway

provider

Type:

string

Description: Determines which provider should SPP use to authenticate the user.

The default value is local. This is used when the username and password have been added in Safeguard.

If the username and password come from Active Directory, specify a provider value. To find out your provider value, complete the following steps:

In case of Safeguard 2.4 or newer:

1. Access the Core Shell on SPS or use the terminal on any Linux machine.
2. Enter the following command: curl -k 'https://<One Identity Safeguard for Privileged Passwords-IP-address-or-hostname>/service/core/v2/AuthenticationProviders' | jq

3. In the response returned, look for the RstsProviderId parameter. The value is your provider value.

   Example: Provider value in Safeguard 2.4 or newer

   If you see the following in the response:

   "RstsProviderId": "ad4",

   In this example, the value of provider would look like the following:

   provider=ad4

In case of Safeguard 2.3 or earlier:

1. Access the Core Shell on SPS or use the terminal on any Linux machine.
2. Enter the following command: curl -k 'https://<One Identity Safeguard for Privileged Passwords-IP-address-or-hostname>/RSTS/UserLogin/LoginController?response_type=token&redirect_uri=urn:InstalledApplication&loginRequestStep=1' | jq

3. In the response returned, look for the PrimaryProviderID parameter. The value is your provider value.

   Example: Provider value in Safeguard 2.3 or newer

   If you see the following in the response:

   "PrimaryProviderID": "ad3",

   In this example, the value of provider would look like the following:

   provider=ad3

username

Type:

string

Description: The username that SPS uses to log in to One Identity Safeguard. Only if the value of use_credential has been configured to explicit. For example:

username=<username>

password

Type:

string

Description: The password that SPS uses to log in to One Identity Safeguard. Only if the value of use_credential has been configured to explicit.

For example:

password=<password>