NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Section I. Managing security
- Monitoring and notifications
- Managing role-based access control
- About role-based access control (RBAC) in NetBackup
- Configuring RBAC
- Role permissions
- Global > NetBackup management
- Access hosts
- Email notifications
- Data classification
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote master server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted master servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Global > Storage
- Assets
- Protection plans
- Credentials
- Global > NetBackup management
- Manage access
- Configure an external certificate for the NetBackup web server
- Security events and audit logs
- Managing security certificates
- Managing user sessions
- Managing master server security settings
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted master servers
- Creating and using API keys
- Configuring authentication options
- Managing hosts
- Troubleshooting the web UI
- Section II. Managing storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud (Cloud Catalyst), OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup Web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Managing protection plans
- Managing protection plans for Microsoft SQL Server
- Usage reporting and capacity licensing
- Configuring storage
- Section III. Veritas Resiliency Platform
- Section IV. Managing credentials
Configure NetBackup for Single Sign-On (SSO)
This section provides steps to set up trust and exchange configuration information between the IDP and the NetBackup master server. Before proceeding with the steps, ensure that the following prerequisites are met in your environment:
An IDP is set up and deployed in your environment.
The IDP is configured to authenticate domain users of Active Directory (AD) or Lightweight Directory Access Protocol (LDAP).
Table: Steps to configure NetBackup for Single Sign-On
Step | Action | Description |
|---|---|---|
1. | Configure the Java keystore | To establish a trust between the NetBackup master server and the IDP, add a SAML Java keystore (JKS) on the NetBackup master server. |
2. | Download the IDP metadata XML file | Download and save the IDP metadata XML file from the IDP. SAML metadata that is stored in XML files is used to share configuration information between the IDP and the NetBackup master server. The IDP metadata XML file is used to add the IDP configuration to the NetBackup master server. |
3. | Add and enable the IDP configuration on the NetBackup master server | |
4. | Download the service provider (SP) metadata XML file | The NetBackup master server is the SP in the NetBackup environment. You can access the SP metadata XML file from the NetBackup master server by entering the following URL in your browser:
Where <NB_Master_Server> is the IP address or host name of the NetBackup master server. |
5. | Enroll the NetBackup master server as a service provider (SP) with the IDP | |
6. | Add SAML users and the SAML groups that use SSO to the necessary RBAC roles | SAML users and SAML user groups are available in RBAC only if the IDP is configured and enabled on the NetBackup master server. For steps on adding RBAC roles, see the following topic. See Add a user to a role. |
After the initial setup, you can choose to enable, update, disable, or delete the IDP configuration.