You can disable single sign on without removing the KACE SMA from the domain.
1. |
◦ |
If the Organization component is not enabled on the appliance, log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin, then click Settings. |
◦ |
If the Organization component is enabled on the appliance, log in to the KACE SMA System Administration Console, https://KACE_SMA_hostname/system, or select System in the drop-down list in the top-right corner of the page, then click Settings. |
2. |
3. |
When single sign on is configured to use Active Directory, authenticated users can access the Administrator Console or the User Console without having to enter login credentials.
Active Directory single sign on enables users who are logged on to the domain to access the KACE SMA Administrator Console and User Console without having to re-enter their logon credentials each time.
Before you connect the KACE SMA to an Active Directory server, verify that:
• |
• |
1. |
◦ |
If the Organization component is not enabled on the appliance, log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin, then click Settings. |
◦ |
If the Organization component is enabled on the appliance, log in to the KACE SMA System Administration Console, https://KACE_SMA_hostname/system, or select System in the drop-down list in the top-right corner of the page, then click Settings. |
2. |
In the Single Sign On section of the Security Settings page, select Active Directory, then provide the following information: |
3. |
A message appears stating the results of the test. To view errors, if any, click Logs, then in the Log drop-down list, select Server Errors.
4. |
5. |
When users are logged in to devices that are joined to the Active Directory domain, they can access the KACE SMA User Console without having to re-enter their credentials. If users are on devices that are not joined to the Active Directory domain, the login window appears and they can log in using a local KACE SMA user account. See Add or edit System-level user accounts.
1. |
◦ |
If the KACE SMA is available on the Internet select Trusted Sites. |
◦ |
If the KACE SMA is not available on the Internet, select local intranet. |
3. |
4. |
Select automatic logon with current username and password. If this option is not selected, Internet Explorer cannot automatically log in to the Administrator Console or User Console even if single sign on is enabled on the KACE SMA. |
1. |
2. |
4. |
In the string value box, enter the URL of the KACE SMA. For example, http://kace_sma.example.com, then click OK. |
When Active Directory single sign on is enabled on the appliance, users who are logged in to the domain can access the Administrator Console or User Console without entering their credentials on the KACE SMA login page.
2. |
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy