QuestionQ19

Post-Deployment

An implementation engineer has enabled Single Sign-On (SSO) but users are unable to authenticate to the Dell PowerProtect Data Domain appliance.

What must be completed to allow SSO login?

  • A Enable only IDP
  • B Disable password authentication
  • C Remove local accounts
  • D Register the system with the SSO provider
Explanation

For SSO to work on a PowerProtect Data Domain system, simply turning on SSO in DD System Manager is not sufficient — the appliance must also be registered with the identity provider (IdP). This registration establishes the trust relationship (client ID/secret, certificates, metadata discovery URL, and redirect URL) between the Data Domain system and the SSO provider so that authentication requests and responses can be validated. Without completing this registration step with the SSO/identity provider, users will be unable to authenticate via SSO even though SSO has been enabled on the appliance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!