jannisfedermair

Hi,

We're in the process of migrating our Pleasant Password Server authentication from LDAP to SAML SSO, using Authentik as our identity provider. The migration on the PPS side works fine — web UI and KeePass clients authenticate correctly via SAML.

However, we rely heavily on the PPS integration in Remote Desktop Manager, and it appears RDM does not support SAML-based authentication against PPS. When "Enforce Partner Sign-In" is enabled in PPS, RDM login fails entirely. The only workaround we've found is enabling "Allow Exception for Direct Sign-In" for the affected users, which bypasses SAML and falls back to direct credential auth — defeating the purpose of the migration for those users.

I found an older thread from 2023 documenting the same issue (https://forum.devolutions.net/topics/40098/pleasant-password-server--saml-sso-authentication), where a Devolutions engineer indicated they would investigate whether the PPS library supports SAML. As far as I can tell, nothing has shipped since then.

So my questions:

1. Is SAML authentication for PPS data sources/credential entries in RDM on the roadmap?

2. Is there any workaround beyond the "Allow Exception for Direct Sign-In" policy exception?

3. Has anything changed in recent RDM versions that might help here?

For context: we're running RDM on Windows, PPS on a recent version with Authentik as the SAML IdP.

Thanks

Hello,

For some reason, only $USERNAME$ works for me.

I will report the issue to our Dev team and reply soon.

Best regards

Hi,

as seen in my examples above $USERNAME$ is the only variable that works every time for me also. The bigger problem is that either $PASSWORD$ works, or the paramters - not both.

BR Jannis

Hi,

is it somehow possible to mix Variables and Parameters in a typing Macro?

e.g. I create a new Typing Macro with the following content:

!NOW ECHOING dollarUSERNAMEdollar
!$USERNAME$
!NOW ECHOING dollarPASSWORDdollar
!$PASSWORD$
!NOW ECHOING bracket1bracket
!{1}
!NOW ECHOING bracket2bracket
!{2}

$USERNAME$ and $PASSWORD$ should be the user/pass from the device im currently running the macro on, {1} & {2} should be the Parameters form the macro itself.

In this case it should be as following:

$USERNAME$=test

$PASSWORD$=test1234

{1}=Parameter1

{2}=Parameter2

The device I'm testing on has Properties -> Security -> Security Settings -> "Allow password in variable" enabled.

Now comes the fun part, as the result differs based on how it's run:

• 1. try:

Open the session normally, then switching back to "Dashboard" (of the selected device), then go to tab "Macros/Scripts/Tools" and select the macro from above. Output:

COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarUSERNAMEdollar
COSWI0229_LAB_RACK_3560#!test
COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarPASSWORDdollar
COSWI0229_LAB_RACK_3560#!$PASSWORD$
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket1bracket
COSWI0229_LAB_RACK_3560#!Parameter1
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket2bracket
COSWI0229_LAB_RACK_3560#!Parameter2

so everything except $PASSWORD$ works.

• 2. try:

Open the session normally, then right click the host in the navigation pane, press "Execute Macro/Script in Terminal", select the Macro from above. Output:

COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarUSERNAMEdollar
COSWI0229_LAB_RACK_3560#!test
COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarPASSWORDdollar
COSWI0229_LAB_RACK_3560#!test1234
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket1bracket
COSWI0229_LAB_RACK_3560#!{1}
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket2bracket
COSWI0229_LAB_RACK_3560#!{2}

so now both variables work but the Parameters don't.

• 3. try:

Open the session normally, then right click the host in the navigation pane, press "Macros/Scripts/Tools", select the Macro from above. Output is the same as in the first try:

COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarUSERNAMEdollar
COSWI0229_LAB_RACK_3560#!test
COSWI0229_LAB_RACK_3560#!NOW ECHOING dollarPASSWORDdollar
COSWI0229_LAB_RACK_3560#!$PASSWORD$
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket1bracket
COSWI0229_LAB_RACK_3560#!Parameter1
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket2bracket
COSWI0229_LAB_RACK_3560#!Parameter2
COSWI0229_LAB_RACK_3560#!NOW ECHOING bracket3bracket
COSWI0229_LAB_RACK_3560#!

Any idea if it's possible to mix those somehow?

Currenlty running "2024.1.23.0 64-bit".

Thanks!