Users

All Posts (6)

avatar

zsomboraklan

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Richard!

I had the time now to setup our Secret Server in RDM (v2023.3.28 at this moment), and I must say, Devolutions engineers did a superb job! Our Secret Server, with SSO login, with corporate customizations, with Azure login, works perfectly. There are many search options as well and I find the possibility of mapping the logon field names to template field names very good. The speed is also very good. So, 84+ IT admins -- including me -- thank you sincerely for doing this integration!.

The only thing I got confused with is the "lookup method" as there are some cases where the results are either more or less than I expect, but this is more like an advisory support case and not a thread to be discussed here.

It is rare that a custom feature request posted in a forum gets implemented in such a good quality. Thanks and keep up the good work!!

Best regards,

Zsombor

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Richard!

Thank you for the good news! Together with me, 81 IT admins are appreciating your efforts and looking forward to it!

Best regards,

Zsombor

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Together,

we are also awaiting the SAML integration method. I understand if it is hard to code.

9 months ago I mentioned in my post the possibility of using the user's API token (bearer token, actually) which can be put to the clipboard. This way the SAML authentication burden would be off from Remote Desktop Manager, as the user would perform this in her browser. Only the URL and this token field would be required for the credential entry. @Richard: Was this considered? Because that might be a quick win, even if it is not as convenient as a SAML logon page.

Best regards,

Zsombor

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Luca,

My last info is from Richard, the same what you can see above. Since then Delinea has released Web Password Filler v3.4.2, with a lot of fixes. Maybe this gives Delinea some more chances. I am also awaiting news.

@Richard, is there some updates? I still uphold my offer to show our integration method (but most probably it is already known to the dev team) :) Anyway, let me know if I can contribute.

Best regards,

Zsombor

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Richard,

This is great news! Thank you for the quick reply! Please feel free - you or the engineering team - to contact me directly if you need a live demo or some more details from our Secret Server integration; I will be happy to assist!

Best regards,

Aklan Zsombor

Secret Server MFA

avatar
avatar
avatar
avatar
avatar

Hello Srikanth, hello Richard,

We face the same problem, as our Secret Server instance is using a corporate SAML MFA solution, making the simple login with in RDM not usable.

Our integration solution is to use a web password credential entry (like Chrome passwords or 1Password), so RDM opens a web site, then let Delinea's Web Password Filler plugin fill in the credentials.

Of course we also would welcome a more streamlined solution, but I think a custom corporate card/app has small chance of getting integrated.

However, I'd like to raise attention to the API token feature in Secret Server. Once a user is logged into the Secret Server (by any method, by any browser), he/she can copy out an API token, allowing scripts to use this authenticated session live (so no reauthentication necessary).

This is located on the user preferences page, as "Generate API Token and Copy to Clipboard".

Maybe asking this key and having a map of credentials<->Secret IDs might be an integration possibility.

What do you think, Richard, can this be a solution?

Best regards,

Zsombor Aklan

1 - 6 of 6 items