Veritas NetBackup™ Appliance Commands Reference Guide
- Overview
- Appendix A. Main > Appliance commands
- Appendix B. Main > Manage > FibreChannel commands
- Appendix C. Main > Manage > HighAvailability commands
- Appendix D. Main > Manage > Libraries commands
- Appendix E. Main > Manage > Libraries > Advanced > ACS commands
- Appendix F. Main > Manage > License commands
- Appendix G. Main > Manage > MountPoints commands
- Appendix H. Main > Manage > NetBackup CLI commands
- Appendix I. Main > Manage > OpenStorage commands
- Appendix J. Main > Manage > Software commands
- Appendix K. Main > Manage > Storage commands
- Appendix L. Main > Manage > Tapes commands
- Appendix M. Main > Monitor commands
- Appendix N. Main > Network commands
- Appendix O. Main > Network > Security commands (DeviceCert)
- Appendix P. Main > Reports commands
- Appendix Q. Main > Settings commands
- Appendix R. Main > Settings > Alerts commands
- Appendix S. Main > Settings > Notifications view commands
- Appendix T. Main > Settings > Security commands
- Appendix U. Main > Support commands
Name
Main > Settings > Security > Authentication > SingleSignOn — Configure and manage single sign-on (SSO) authentication for NetBackup Appliance Web Console (web console) users.
SYNOPSIS
Add
Delete
Disable
Enable
Show
Update
DESCRIPTION
Use the SingleSignOn command options to configure and manage the identity provider (IDP) for each authenticated web console user. The NetBackup appliance currently supports the following IDP:
ADFS (Active Directory Federation Services)
Note:
The NetBackup appliance does not currently support SSO login to the shell menu.
OPTIONS
The following describes the options for the SingleSignOn command.
- Add <idpname> metadata <userFieldName> <groupFieldName>
Use this option to add a new configuration for an IDP on the appliance. When you add a new IDP configuration, SSO is enabled by default. Only one IDP configuration is allowed. If you ever need to change the name of the current configuration, you must first delete it before you can add a new IDP configuration name. The following describes the complete command syntax:
idpname
Enter the name that you want to use for this IDP configuration.
metadata
Select how to associate the necessary metadata for the IDP configuration, as follows:
Import file
To import the IDP XML metadata file, you must first upload it into the general share directory. Use the Settings > Share General Open command to open the general share directory
/inst/share
. You can also upload the file into the general share directory from the File Manager tab in the appliance web console.Enter URL
Enter the URL address to retrieve the IDP XML metadata file.
userFieldName [userPrincipalName]
groupFieldName [memberOf]
These parameters are optional and are shown with their default values. You can change the default values as needed to retrieve the appropriate SAML assertion details.
- Delete
Use this option to delete the current IDP configuration on the appliance. You must delete any current IDP configuration before you can add a new IDP configuration.
- Disable
Use this option to disable the currently configured IDP on the appliance. Disabling the IDP configuration also blocks or prevents login using SSO credentials.
- Enable
If the current IDP configuration is disabled, use this option to re-enable it and allow login using SSO credentials.
- Show
Use this command to view the details of the currently configured IDP on the appliance.
- Update
Use this option to update the currently configured IDP on the appliance. This command lets you update or edit all attributes except for the IDP name.