SSO in Veritas SaaS Backup
A User Administrator can configure and enable SSO for him or herself and for other sub-users. In the process of setting up SSO, we recommend that the User Administrator create an SSO Admin – a dedicated user who has permission to access the SSO configuration.
SSO is never enabled for the SSO Admin so he can always sign in to the account with his VSB credentials. This will ensure that the User Administrator and other users will not get locked out of their account in case SSO is configured incorrectly or an SSO certificate expires.
Before you configure SSO in Veritas SaaS Backup, you must configure SSO with your identity provider. If you are using Azure Active Directory as your identity provider, see: How to create an Azure application for SSO
To configure SSO:
- Sign in to Veritas SaaS Backup as a User Administrator.
- Click the burger icon in the upper-right corner and select the SSO icon.
- Click Add in the lower-right corner of the Configurations box to open the SSO Configuration Strings window.
- In the Name field, enter a name and select Apply.
- In the IDP URL field, enter the Identity Provider URL and select Apply.
The IDP URL is the URL that performs the validation of credentials. You can find the IDP URL when configuring SSO with Azure AD Premium or other identity provider.
In Azure it is called Login URL or SAML Single-Sign On Service URL.
- In the Certificate field, paste the text of the certificate (Base 64) code from Azure AD Premium or other identity provider.
The Certificate (Base 64) is obtained when configuring SSO with Azure AD Premium or other identity provider. Make sure you copy only the text between the begin and end markers.
- Select the Enabled check box to make SSO active for the User Administrator and all other sub-users created by the User Administrator.
- Select the Optional check box if you want the User Administrator and sub-users to have the option to sign in with either SSO or with VSB credentials. We recommend clearing this check box so that the User Administrator and sub-users will log in through Azure AD Premium or other identity provider.
- Click Save.
Note: If you have not done so already, you need to assign users you want to be able to use SSO in your identity provider and then make sure that users with the same email address are in Veritas SaaS Backup.
If you are using Azure ADFS as your identity provider, see these step-by-step instructions: How to assign users to an SSO application in Azure
Was this content helpful?
Translated Content
Please note that this document is a translation from English, and may have been machine-translated. It is possible that updates have been made to the original version after this document was translated and published. Veritas does not guarantee the accuracy regarding the completeness of the translation. You may also refer to the English Version of this knowledge base article for up-to-date information.