A discussion arose about restricting access to ControlUp's DEX portal, such as with a specific client certificate, IP address or Azure hybrid joined client machine. Using SAML could be a solution as the service provider can deny access if criteria are not met, and IP restrictions are said to be arriving in the early months of 2024. The DEX login method "azure login" does not have further possibilities, but SAML does.
Read the entire article here...
SAML Authentication Related Archives
SAML Authentication training and support-related archives from inside the ControlUp Community on Slack.
Restricting Access to the ControlUp DEX Portal
The user asked how to restrict access to the DEX portal - the solution provided is to use the SAML login and configure the service provider to only allow access from certain clients or IP addresses. This can be done with the Azure login option, and IP restrictions are on their way to DEX, estimated to be available in early Q1 2024.
Read the entire article here...
Read the entire article here...
Restricting Access to Organization Creation in ControlUp DEX Instance
A user asked about preventing unauthorized creation of organizations in their DEX instance. They suggested a configuration option to only let full admins create new orgs. It was noted that creating a new organization requires a license and currently there is no way to block it. The user's request was added to the backlog to block organization creation to admins only.
Read the entire article here...
Read the entire article here...
Filtering Environment Assessment: Desktops or Servers?
A user asked if there is a way to filter the Environment Assessment to show desktops or servers. Reminiscent of the Legacy Insights interface, the new reports coming to Solve may not offer this either. The user asked @member to comment on the matter. Finally, they expressed their support for MSPs Unite.
Read the entire article here...
Read the entire article here...
Does ControlUp Insight have FSLogix drive information anywhere?
A user asked if Insight has FSLogix drive information stored. The answer is that there are no new data uploads at present, and they should keep an eye out for a new data pipeline. Everything is moving to Solve, Azure AD setup is required for SSO and help is available with the setup at https://support.controlup.com/docs/saml-sso-for-solve?highlight=sso#azure-active-directory.
Read the entire article here...
Read the entire article here...
Setting Up an Azure Integration with ControlUp
A user asked about setting up an Azure integration and using the same app/service principal for Azure SAML auth. It was suggested to keep an eye on Rate Limits and use multiple SPN's to split requests and maintain uninterrupted service. This can be tracked in 8.8 using Subscription columns AZ % Rate Limit Usage, AZ Retries (Past Hour), AZ AIP Stats and AZ & AIP Variance. Full instructions can be found at https://support.controlup.com/docs/en/azure-integration-load-balancer-statistics?highlight=aip#introducion.
Read the entire article here...
Read the entire article here...
Accessing the API Tab in ControlUp SIP
In order to access the API tab in ControlUp SIP, users must login directly to SIP, not through DEX. If unable to log on, a support ticket can be submitted for a devops team to create an API key. An instructional video featuring all the steps to get started with Edge DX API and Power BI can be found at https://vimeo.com/843341854?share=copy. There is no exact ETA on when the API key tab will be available for DEX.
Read the entire article here...
Read the entire article here...
Error Code 40005 When Enabling SAML Authentication for ControlUp Solve
A user reported an error code 40005 when trying to enable SAML authentication for Solve, and the Azure authentication is successful. They asked how to adjust the mapping. According to the error message, the user was advised to check for certificates and configurations, as outlined in the article on SAML-SSO-for-Solve at https://support.controlup.com/docs/saml-sso-for-solve.
Read the entire article here...
Read the entire article here...
How to add users to ControlUp Insights and Solve Access
A user asked how to add users to Insights - they needed to be added to the Security policy and then launch the RTC one-time to sign up. It is recommended to give the user the "Use Solve" right in the security policy, and if a SAML is used, then there is no need for the export/import process. To get the "Manage Solve" permissions, this is found in the "Perform organization-wide actions". The "Create Solve user automatically" option in the SAML settings is not available at the moment, with no estimated time of repair.
Read the entire article here...
Read the entire article here...
Error “Communication problem. Please try agai n in a few minutes” when new user’s sign into ControlUp Insights
New users were experiencing an error when logging in to the SaaS URL's, and it was observed through the discussion that they would need to open the console first. It was suggested that for Solve users, they can be created without touching the console with the help of PowerShell cmdlets, CSV import, and SAML. The option is not yet available for Insights.
Read the entire article here...
Read the entire article here...