Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - Quest ESSO Console Administrator Guide

1. Overview 2 Authenticating to Quest ESSO Console and Managing Protection Modes 3 Searching the Directory Tree 4 Managing Administrators 5 Managing Security Profiles
5.1 Managing Time Slices 5.2 Managing Password Format Control Policies 5.3 Managing User Security Profiles 5.4 Managing Access Point Security Profiles 5.5 Managing Application Security Profiles 5.6 Defining Security Profiles Default Values 5.7 Managing User and Access Point Security Profiles Priorities
6 Managing Directory Objects
6.1 Managing Applications 6.2 Managing Users 6.3 Managing Access Points 6.4 Managing Representative Objects 6.5 Managing Clusters of Access Points 6.6 Selecting a Domain Controller
7 Importing/Exporting Security Profiles and Directory Objects 8 Managing Smart Cards
8.1 Assigning Smart Cards to Users 8.2 Formatting Smart Cards 8.3 Forcing a new PIN 8.4 Disabling Temporarily Smart Cards 8.5 Unlocking Smart Cards 8.6 Sending Smart Cards to a Blacklist 8.7 Extending the Validity of a Smart Card 8.8 Allowing Users to Renew their Smart Card Certificates 8.9 Displaying Smart Card Properties 8.10 Displaying the List of Supported Smart Cards 8.11 Managing Smart Card Configuration Profiles 8.12 Managing Loan Cards 8.13 Managing Smart Cards' Authentication Parameters 8.14 Managing Batches of Smart Cards
9 Managing SA Server Devices 10 Managing RFID Tokens 11 Managing Biometric Enrolment 13 Enabling the Public Key Authentication Method 14 Managing the Emergency Plan 15 Managing Audit Events 16 Managing Reports 17 Customizing Configuration Files 18 Creating Scripts Appendix A: Regular Expressions - Basic Syntax Appendix B: Listing Audit Events and Error Codes Appendix C: Correspondence Between Profile and Administration Rights

4.5 Deleting an Administration Role

1.
In the Directory panel, select the user for which you want to delete his administration profile.

4.6 Displaying your Administration Role

1.
In the File menu, click Administration Profile/Current profile.
a)
The Current profile tab displays:
Your administration profiles.
In advanced administration mode, the Show rights button allows you to displays the administration rights corresponding to the displayed profiles.
b)
Profile propagation tree tab allows you to display your parent administrator and your direct child administrators, if any. As a super administrator, this tab displays all the levels of the propagation tree.
c)
Administered applications tab displays the list of applications for which you have administration rights.
d)
Administered users tab displays the list of users for which you have administration rights.

4.7 Modifying the Parent Administrator

1.
In the Directory panel, select the user for which you want to modify the parent administrator.
2.
In the Administration Profile tab, click Set Parent Administrator.
3.
Select the new parent administrator: Use the Browse tab to browse the directory tree structure or use the Search tab to find the user according to its name.
4.

4.8 Adding/Removing Primary Administrators

Upon the installation of the solution (more precisely when the primary controller is initialized), a user account that has full administrative rights is declared. This is the Quest ESSO Primary Administrator. It is a super-administrator who can manage all the objects in the directory.
The
Quest ESSO Console allows you to add other primary administrators if required.
You are logged on as a primary administrator.
1.
In the File menu, click Configuration.
The Configuration window appears.
2.
Click the Primary administrators tab.
3.
Use the Add and Remove buttons to give/remove the super-administrator rights to users registered in the directory.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating