Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Safeguard Authentication Services 5.0.2 - Installation Guide

Table of Contents

Privileged Access Suite for Unix

About this guide

Introducing One Identity Safeguard Authentication Services

About licenses System requirements

Windows and cloud requirements

Windows components Windows permissions

Unix agent requirements

Unix components Permissions matrix Encryption types

Management Console for Unix requirements

Network requirements

Installing and configuring Safeguard Authentication Services

Install the management console

Installing and configuring the management console

Install Safeguard Authentication Services Windows components

Installing Windows components Customizing installation options Installing using msiexec.exe

Configure Active Directory

Configuring Active Directory

About Active Directory configuration Join the host to AD without the Safeguard Authentication Services application configuration Version 3 Compatibility Mode

Configure Unix agent components

Set up Management Console for Unix wizard

Configure Console for Active Directory Logon dialog Set up console access by role dialog Identify Console dialog Set Supervisor Password dialog Summary dialog

Logging in to Management Console for Unix Prepare Unix hosts

Adding hosts to the management console Profiling hosts

Configuring automatic profiling

Installing software on hosts Checking readiness Joining hosts to Active Directory Check SAS agent status

Manually checking SAS agent status Configuring to automatically check agent status

Installing and joining from the Unix command line

The pre-installation diagnostic tool

Running preflight

The install script

Installing the Safeguard Authentication Services agent Installation script options

Licensing Safeguard Authentication Services

Verifying license information Installing licenses from the command line

Creating the application configuration from the Unix command line

Changing the schema configuration mode

Joining the domain

Joining the domain using VASTOOL Joining the domain using VASJOIN script Dynamic DNS update tool

Getting started with Safeguard Authentication Services

Getting acquainted with the Control Center

Filtering the list of GPOs Editing a GPO Generating a settings report Showing files Launching GPMC

Tools Preferences

Adding licenses using the Control Center

Display specifiers

Registering display specifiers Unregistering display specifiers Display specifier registration tables

Global Unix Options Logging Options

Enabling debug logging on Windows

Starling Two-Factor Authentication

One Identity Starling integration

Starling Two-Factor Authentication requirements Setting up Starling users Joining Safeguard Authentication Services with Starling Configuring Starling to use a proxy server Starling Attributes: Configure LDAP attributes for use with push notifications Logging in with Starling Two-Factor Authentication Unjoining from Starling Disabling Starling 2FA for a specific PAM service

Schema Attributes

Unix Attributes

Active Directory schema extensions Configuring a custom schema mapping Active Directory optimization

Starling Attributes: Configure LDAP attributes for use with push notifications

Management Console for Unix Configuration

Learning the basics

Adding a local group Adding a local user account Adding an Active Directory group account Adding an Active Directory user account Changing the default Unix attributes Active Directory account administration

Enabling local user for AD authentication Testing the mapped user login Unix-enabling an Active Directory group Unix-enabling an Active Directory user Testing the Active Directory user login

Running reports

Host reports User reports Group reports Access & Privileges reports Product licenses usage report

Use Safeguard Authentication Services PowerShell

Unix-enabling a user and user group (PowerShell Console) PowerShell cmdlets

Change Auditor for Authentication Services

Installing Change Auditor for Authentication Services

Installing Defender

Troubleshooting

Getting help from technical support Disaster recovery Long startup delays on Windows Pointer Record updates are rejected Resolving DNS problems Resolving preflight failures Time synchronization problems Unable to install or upgrade Unable to join the domain Unable to log in vasypd has unsatisfied dependencies

Enterprise package deployment

Installing the agent package Agent upgrade commands

Restarting services

Uninstalling the agent packages Oracle Solaris 10 zones/containers support

Safeguard Authentication Services and Oracle Solaris 10 Zones installation guidelines

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center