NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring and notifications
- Job monitoring
- Job notifications
- NetBackup event notifications
- Section I. Managing hosts
- Managing host properties
- Managing credentials for workloads and systems that NetBackup accesses
- Managing deployment
- Section II. Configuring storage and backups
- Configuring storage
- Overview of backups in the web UI
- Managing protection plans
- Managing classic policies
- Managing backup images
- Pausing data protection activity
- Configuring storage
- Section III. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- Configuring RBAC
- Add a custom RBAC role
- Section IV. Detection and reporting
- Detecting malware
- Detecting anomalies
- Usage reporting and capacity licensing
- Detecting malware
- Section V. NetBackup workloads and NetBackup Flex Scale
- Section VI. Disaster recovery and troubleshooting
Sign-in options for the NetBackup web UI
NetBackup supports authentication of local domain users and Active Directory (AD) or LDAP domain users. AD and LDAP domains, smart card, and Single Sign-On (SSO with SAML) requires separate configuration for each primary server domain where you want to use the authentication method.
NetBackup supports the following types of user authentication:
Username and password
Digital certificate or smart card, including CAC and PIV
This authentication method only supports one AD or LDAP domain for each primary server domain and is not available for local domain users.
See Configure user authentication with smart cards or digital certificates.
Single sign-on, with SAML
Note the following requirements and limitations.
To use SSO, you must have a SAML 2.0 compliant identity provider configured in your environment.
Only one AD or LDAP domain is supported for each primary server domain. This feature is not available for local domain users.
Configuration of the IDP requires the NetBackup APIs or the NetBackup command nbidpcmd.
API keys are used to authenticate a user or a group and cannot be used with SAML-authenticated users or groups.
Global logout is not supported.