A user was having issues setting up SAML for DEX and reached out for assistance. The ControlUp team suggested checking the Endpoint/Assertion Login URL configured in Okta, as well as ensuring the correct region is selected. The user later realized they had provided the wrong URL to their Okta admin and resolved the issue.
Read the entire article here...
SAML Authentication Related Archives
SAML Authentication training and support-related archives from inside the ControlUp Community on Slack.
New Remote Control Feature for Non-Domain/Corporate Devices and IP Restrictions in ControlUp
There was a discussion about the new Remote Control feature and whether non-Domain/Corporate devices can access it. The new feature is not dependent on Active Directory and only requires the agent to communicate with ControlUp's backend. Some companies may see this as a security risk, but it can be restricted to only allow access from corporate-owned devices by setting up the SAML provider. The required URLs for communication can be found at https://support.controlup.com/docs/agent-outbound-communication#required-urls and more information about remote controlling VDI/DAAS devices can be found at https://support.controlup.com/docs/remote-control-your-vdi-daas-devices. The group also discussed the importance of thoroughly reading and understanding the documentation before asking questions.
Read the entire article here...
Read the entire article here...
Exporting Edge Users and Roles to DEX
There is a discussion about exporting Edge users and roles to DEX, with the suggestion to recreate them or set up SAML for automatic user provisioning. More customization is available through DEX, such as targeting device groups and tags for user permissions. An option to assign permissions based on user groups in an IdP is also mentioned.
Read the entire article here...
Read the entire article here...
Troubleshooting Access for ControlUp Academy with SAML
A user had issues with using ControlUp Academy configured with SAML and being able to access their account. Support suggests using previous username and password to change the default group for SAML login, and if issues persist, to contact support to reset SAML. In response, a question was raised about SAML automatically assigning admin rights if the email address is the same, to which support replied in the affirmative.
Read the entire article here...
Read the entire article here...
Exporting and Importing Users in ControlUp – Tips and Updates
A user asked about how to export users from Solve and add them to app.controlup.com. Another user mentioned that setting up SAML properly eliminates the need for this export. The first user requested a bulk import option and suggested that SAML groups do not work for them. A link was shared for configuring user attributes in the IDP. Another user stated that most customers get help from other departments for this process. A ControlUp team member thanked them for the feedback and mentioned that they will add an option to invite VDI users from the DEX UI.
Read the entire article here...
Read the entire article here...
Onboarding Technicians into ControlUp: Tips and Tricks
A user asked how technicians are onboarded into ControlUp and mentioned concerns about access through DEX and the VDI console. Other users chimed in with suggestions and possible solutions, mentioning changes made in version 9 of ControlUp. A helpful article on SSO groups was also referenced.
Read the entire article here...
Read the entire article here...
SAML Login Timing Issue and Suggestions for ControlUp DEX Environment Setup
A user encountered an issue while setting up the DEX environment, where first-time users attempting to login via SAML were receiving a "You don't have permissions to view this page" error until they logged out and back in. This may require a support ticket to resolve, and the user suggests that SAML group memberships should be displayed in the User Settings - Roles list. Another user suggested that this could be a timing issue, as the initial role may not be known until after the first login. The initial issue was not resolved and will be revisited the following day.
Read the entire article here...
Read the entire article here...
Firewall and Webproxy Exceptions for ControlUp DEX Platform
A user was looking for firewall and webproxy exceptions for the new DEX platform. They found some documentation on https://support.controlup.com/docs/get-started-with-the-new-dex-platform, but noticed some discrepancies with denied websites. They also mentioned https://support.controlup.com/v1/docs/communication-ports-used-by-controlup-hybrid-cloud-1 as a helpful resource. Another user pointed out that they did not see the prod-dex-login URL listed in the documentation and asked for more information on the source. It was confirmed that the user's organization had not properly set up the SAML login method for DEX. A request was made to look into the issue internally.
Read the entire article here...
Read the entire article here...
Streamlining the Login Process for ControlUp’s DEX Console
ControlUp users discussed the login process for the DEX console, which can be simplified by using the Azure login option. If not using SAML, users can log in with their email and password, with the option to disable MFA. In the upcoming release, users will also be able to log in with an email-based user, making the process even more seamless. The specific login steps were outlined, including the use of an IDP for SAML authentication. URL: app.controlup.com/acmeorg/saml (with acmeorg being the specific organization)
Read the entire article here...
Read the entire article here...
Error when Launching ControlUp Console on Windows 10 Machines
Users reported an apparent error when launching the ControlUp Console, asking for tips or help to resolve. The ControlUp team clarified that this is just an informational message rather than an error, and provided links for more information. It was also mentioned that the console must be run from a domain-joined machine using a domain user. Further discussion included potential changes to this requirement in the future.
Read the entire article here...
Read the entire article here...