Chat now with support
Chat with Support

Safeguard Authentication Services 5.0.4 - Administration Guide

Privileged Access Suite for Unix Introducing One Identity Safeguard Authentication Services Unix administration and configuration Identity management Migrating from NIS Managing access control Managing local file permissions Certificate Autoenrollment Integrating with other applications Managing Unix hosts with Group Policy
Safeguard Authentication Services Group Policy
Group Policy Concepts Unix policies One Identity policies
Display specifiers Troubleshooting Glossary

Installing Change Auditor for Authentication Services

The following steps outline the basic procedure for installing Change Auditor for Authentication Services. See the Change Auditor Installation Guide to obtain detailed steps for installing Change Auditor for Authentication Services.

To install Change Auditor for Authentication Services

  1. Insert the Safeguard Authentication Services distribution media.

    The Autorun Home page displays.

    Note: If the Autorun Home page does not display, navigate to the root of the distribution media and double-click autorun.exe.

  2. Click the Setup tab and select Change Auditor for Authentication Services.

    The Change Auditor for Authentication Services for Active Directory web page opens.

  3. Click Download on the left navigation panel.
  4. Follow the online instructions to gain access to the Trial Download page.
  5. From the Trial Download: Change Auditor for Active Directory page, click the Installation Guide link.

Application integration

One Identity provides many applications with the same level of Active Directory integration that it provides for Unix-based operating systems. That is, One Identity's solution provides Active Directory-based single sign-on (and the closely associated reduced sign-on) for the following applications.

Table 22: Applications that integrate with Safeguard Authentication Services
Application One Identity provides

Ansible

Infrastructure Administrators can use Ansible 2.9 or later for the following functions, including generating reports.

  • Install, upgrade, and uninstall Safeguard Authentication Services (SAS) software packages and create reports to summarize software deploy status
  • Configure and join Safeguard Authentication Services to my AD domain including:

    • Perform preflight checks

    • Modify vas.conf

    • Modify users/groups.allow and users/groups.deny

    • Modify user/group overrides

    • Join/unjoin SAS from domain

    • Create reports to summarize configure/join status

Authentication Services Ansible Collection

The One Identity Authentication Services Ansible Collection, referred to as ansible-authentication-services, consists of roles, modules, plugins, report templates, and sample playbooks to automate software deployment, configuration, Active Directory joining, profiling, and report generation for Safeguard Authentication Services. Go to: https://github.com/OneIdentity/ansible-authentication-services.

Ansible details

For Ansible information consult:

Applications with an API

You can integrate any application with an authentication API (such as GSSAPI) with Active Directory for single sign-on.

LDAP-aware applications

You can bring any non-Windows application that is LDAP-aware into the Active Directory trusted realm through a powerful LDAP proxy.

Kerberos-enabled applications

You can bring any non-Windows application that is Kerberos-aware into the Active Directory trusted realm.

Oracle databases

Integration to enable single sign-on to Oracle databases running on Unix or Linux.

SAP

An SAP-certified single sign-on solution that enables an Active Directory login to provide seamless access to SAP GUI applications running on Unix or Linux. One Identity One also delivers single sign-on for any SAP NetWeaver application.

Managing Unix hosts with Group Policy

Safeguard Authentication Services extends Group Policy to Unix, Linux and macOS. Safeguard Authentication Services Group Policy provides policies to manage a wide array of configuration settings, files, scripts and applications.

Note: For more information about managing your macOS clients with Group Policy, see the Safeguard Authentication Services macOS Administration Guide.

Safeguard Authentication Services Group Policy

The Microsoft Group Policy management solution is included as an integral part of the Microsoft Windows Server and allows administrators to define configurations for both Windows servers and desktops. Windows Administrators can use Group Policy to set policies that apply across a given site, domain, or range of organizational units (OUs) in Active Directory.

Group Policy allows administrators to use Microsoft Group Policy to manage configuration settings for non-Windows operating systems and applications. Safeguard Authentication Services allows Group Policy to become a single integrated tool for managing resource configuration in your enterprise, Windows and non-Windows alike.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating