Rapid Recovery 6.10 - User Guide

This section describes the two options available for logging in to the Rapid Recovery Core Console.

Topics include:

• Understanding SAML single sign-on
• Credentials Vault

Rapid Recovery offers the ability to link a single sign-on identity provider (IdP), to the Rapid Recovery Core using the SAML 2.0 protocol. Use of this feature is optional. Rapid Recovery supports only service provider-initiated login.

To configure Rapid Recovery for SAML, see Configuring SAML settings.

Prerequisite

Before you configure the SAML feature, establish an account with one of the following compatible IdPs:

• MIcrosoft Azure Active Directory (Azure AD)
• Okta
• OneLogin

For more information, see the white paper Configuring SAML single sign-on authentication for Quest Rapid Recovery and the documentation provided by your IdP.

This section describes the Credentials Vault feature of Rapid Recovery.

Topics include:

• Understanding the Credentials Vault
• Adding accounts to the Credentials Vault
• Viewing or changing accounts saved in the vault
• Using credentials from the vault

Credentials Vault is a usability feature of Rapid Recovery release 6.10 and later that manages account login credentials used within the Rapid Recovery Core Console. Use of this feature is optional.

When performing operations such as adding a machine or cluster to protection, setting up virtual export or replication, connecting to a repository, archiving or restoring archived recovery points, and so on, you are prompted to enter account credentials. For each user account, credentials include the user name, password, and a description field to identify the account. After you enter your credentials, if you choose to, you can add them to the Credentials Vault.

Thereafter, the next time you want to perform an operation in the Core Console that uses the same account, instead of manually entering your user name and password, you can select the account from a drop-down menu.

The Credentials Vault simplifies management of your passwords. For example, if your organization has a security policy mandating password changes at frequent intervals, one visit to the Credentials Vault page can let you easily update your password for each user account accessed from the Rapid Recovery Core Console.

The Credentials Vault is unobtrusive. Sections of the Core Console UI that are enabled for the Credentials Vault include a + sign next to the User name field when prompted for credentials.

As its name implies, the Credentials Vault includes security features. For example:

• Credential information in the vault is encrypted.
• Once entered and saved, passwords are not displayed. This reduces the chance of exposure of individuals' passwords when multiple users access the Core.
• By design, Cloud credentials are managed separately in the Core Console.

At any time, you can open the Credentials Vault page in the Core Console to view and manage accounts saved in the Credentials Vault. If no accounts have been entered yet, optionally, you can add them directly from this page.

• For information on adding accounts to the vault, see Adding accounts to the Credentials Vault.
• For more information on viewing and modifying account credentials held in the vault, see Viewing or changing accounts.
• For information on using account credentials saved in the vault, see Using credentials from the vault.

Command Line and PowerShell scripts exist to support this feature. For more information about the Credentials Vault, see the most recent edition of the Rapid Recovery Commands and Scripting Reference Guide.