A discussion took place about managing permissions for users on ControlUp devices. A potential solution was suggested - creating a new role and adding the hidden device group to it, with access granted only through SSO groups or individual accounts. However, it was noted that even with a role without any permissions checked, all devices were still visible. A back-end option was mentioned for disabling access to a product entirely for a specific user, and there was also a suggestion to use device tags to limit access to devices.
Read the entire article here...
SAML Authentication Related Archives
SAML Authentication training and support-related archives from inside the ControlUp Community on Slack.
Integrating CISCO DUO with ControlUp DEX – Looking for Advice
A user is seeking advice on integrating CISCO DUO as an SSO solution for ControlUp DEX. They are looking for someone with experience before potentially opening a ticket with the support team.
Read the entire article here...
Read the entire article here...
How to Bypass Step Verification with ControlUp
A team member was looking for help with bypassing a step verification for a client's request. Suggestions included using Security Pen Testing or signing in through SAML with the necessary attributes passed by an IDP. After experimentation, removing the "Sign-in to VDI with LDAP" option was found to work. Others who have issues can add their ControlUp email accounts in the VDI console to access this section through SSO.
Read the entire article here...
Read the entire article here...
Moving from Okta to Entra ID for SAML Authentication at ControlUp
The team at ControlUp is moving from Okta to Entra ID for SAML authentication and is seeking advice on any potential issues with the migration process. An individual suggests considering the use of the native Entra ID Groups feature rather than SSO Groups for a smoother transition. The SAML configuration for Entra ID can be found in the ControlUp documentation. An account representative named Michael Thompson may be contacted for assistance, and ControlUp's support team can also be reached for help.
Read the entire article here...
Read the entire article here...
Troubleshooting VDI Access in ControlUp One
There was a discussion on an issue with accessing VDI in ControlUp One after disabling certain log in method. It was suggested to check permissions and add DEX user to Controlup admins. Another option is to enable the "sign in to VDI... with LDAP" checkbox. Possible solution is detailed in the article https://support.controlup.com/docs/vdi-daas-authentication-methods. Suggestions were given to check C:\windows\ServiceProfiles\NetworkService\AppData\Roaming\ControlUp\cuMonitor.log for monitor name that handled the request.
Read the entire article here...
Read the entire article here...
Troubleshooting Web Login Timeouts in ControlUp 9.0.5
Members of the ControlUp team discussed an issue with the Web login for version 9.0.5, in which they were getting logged out after 24 hours despite setting the R/T console to 14 days. They questioned whether using SAML would change the session timeout, and another member suggested trying to rename the ControlUp folder in the roaming appdata in the profile.
Read the entire article here...
Read the entire article here...
How to Share Dashboards on ControlUp Portal
A user has created a private dashboard on the ControlUp portal and wants to share it with their team or everyone. They are not seeing the share option on the dashboard and are curious about the required permissions. The team suggests referencing the Edge DX article for necessary permissions, but will also update the article to mention permissions for Real-Time DX. The user may need to add their email address in SAML if they are not recognized as having the required permissions.
Read the entire article here...
Read the entire article here...
Clarifying Authentication Options in ControlUp 9.05
Users discuss authenticating with the RT console in ControlUp 9.05 using a domain admin account without an email address. It is mentioned that an email address is now required for authentication and that LDAP login is still possible. A call is suggested for clarification. The ControlUp account - email based user is also mentioned.
Read the entire article here...
Read the entire article here...
Navigating Permissions and Training at ControlUp Academy
ControlUp Academy is a training platform for ControlUp software, offering free self-training and instructor-led content. Users can also obtain ControlUp certifications through the Academy at https://cuacademy.controlup.com/. Additionally, the discussion touched on permissions and login methods for the RT console, with @member providing tips on using SAML and ControlUp groups to resolve issues. The Academy can assist with further training on this topic.
Read the entire article here...
Read the entire article here...
Troubleshooting VDI Module in ControlUp DEX
There were issues with getting the VDI module in DEX to work properly for the help desk team. SAML was causing issues, and a security policy needed to be set up to accept SSO users. A video was suggested and it was recommended to check a certain box in the login methods. The prompt for UPN meant a different logon method was used, so the team was reminded to use SAML. The UPN should be listed if logged on with SAML. By suppressing the other method and reminding the help desk, the issue was resolved.
Read the entire article here...
Read the entire article here...