A user encountered an issue with the new live features on ControlUp, specifically with the management option for file and registry browsing. After troubleshooting, it appears to be a permissions issue and potentially a global feature flag. The user was advised to log with support for further assistance.
Read the entire article here...
SAML Authentication Related Archives
SAML Authentication training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Device Details Error in ControlUp Endpoints
There was a discussion about an error message popping up when opening details for a specific device in Physical Endpoints/Dex portal. Support was contacted and a workaround for this issue has been found. A status update was provided and it was suggested to contact support. The maintenance was completed, but some users are still experiencing the error. The fix should be applied shortly, and logging out of SAML and logging back in is suggested to resolve the issue.
Read the entire article here...
Read the entire article here...
Configuring SAML SSO in ControlUp
A team member asked about configuring SAML SSO correctly, with a question about the default role and user permission assignments. Other team members clarified that the default role should be the minimum level of permissions and that additional permissions can be assigned through SAML roles. An example was provided of how SAML roles can provide additional permissions for specific users.
Read the entire article here...
Read the entire article here...
Troubleshooting SAML Login for CU4VDI Users
The discussion revolved around an issue with logging in via SAML for CU4VDI users. The error suggested that there were no Active Directory user accounts, even though SAML was being used. The group brainstormed possible solutions and DM'd the original poster for more specific information.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Upgrade Process
An employee is troubleshooting the upgrade process for ControlUp. They are updating from version 9.0.5.423 to 9.1.5.445 and have encountered an rpc error when trying to add a monitor to a specific region. The issue is due to the console using the Windows identity of the person running the console, so the user may need to run the console as a user with permission or deploy the monitor through PowerShell. The recommended upgrade order is console, monitor, data collector agents, and all other agents. The ControlUp website has a guide for upgrading and the employee has a further question about downloading the Real-Time DX Console.
Read the entire article here...
Read the entire article here...
Managing User Permissions and Device Access on ControlUp
A discussion took place about managing permissions for users on ControlUp devices. A potential solution was suggested - creating a new role and adding the hidden device group to it, with access granted only through SSO groups or individual accounts. However, it was noted that even with a role without any permissions checked, all devices were still visible. A back-end option was mentioned for disabling access to a product entirely for a specific user, and there was also a suggestion to use device tags to limit access to devices.
Read the entire article here...
Read the entire article here...
Integrating CISCO DUO with ControlUp DEX – Looking for Advice
A user is seeking advice on integrating CISCO DUO as an SSO solution for ControlUp DEX. They are looking for someone with experience before potentially opening a ticket with the support team.
Read the entire article here...
Read the entire article here...
How to Bypass Step Verification with ControlUp
A team member was looking for help with bypassing a step verification for a client's request. Suggestions included using Security Pen Testing or signing in through SAML with the necessary attributes passed by an IDP. After experimentation, removing the "Sign-in to VDI with LDAP" option was found to work. Others who have issues can add their ControlUp email accounts in the VDI console to access this section through SSO.
Read the entire article here...
Read the entire article here...
Moving from Okta to Entra ID for SAML Authentication at ControlUp
The team at ControlUp is moving from Okta to Entra ID for SAML authentication and is seeking advice on any potential issues with the migration process. An individual suggests considering the use of the native Entra ID Groups feature rather than SSO Groups for a smoother transition. The SAML configuration for Entra ID can be found in the ControlUp documentation. An account representative named Michael Thompson may be contacted for assistance, and ControlUp's support team can also be reached for help.
Read the entire article here...
Read the entire article here...
Troubleshooting VDI Access in ControlUp One
There was a discussion on an issue with accessing VDI in ControlUp One after disabling certain log in method. It was suggested to check permissions and add DEX user to Controlup admins. Another option is to enable the "sign in to VDI... with LDAP" checkbox. Possible solution is detailed in the article https://support.controlup.com/docs/vdi-daas-authentication-methods. Suggestions were given to check C:\windows\ServiceProfiles\NetworkService\AppData\Roaming\ControlUp\cuMonitor.log for monitor name that handled the request.
Read the entire article here...
Read the entire article here...