After you complete the initial installation and configure BeyondTrust Password Safe as the external key vault, you can set up the authentication type for Automation 360 Control Room users in the Initial Setup (this occurs directly after the initial installation completes).
Procedure
- From the Authentication type for Control Room users dialog box, click Active Directory.
- Optional: Configure the Active Directory integration credential (this is the credential that the Control Room uses to authenticate users with Active Directory) to be retrieved from BeyondTrust Password Safe. Click External Key vault and enter the BeyondTrust Password Safe secret to retrieve credentials in the field.
- Click Discover connections. The available domains and sites display.
- Click Next and continue to create the Control Room first admin. Save the Admin user information.
Results
The Control Room will attempt to retrieve the credential from the BeyondTrust Password Safe and then authenticate to the Domain Controller. If this fails, cause might be one of the following:
- There is no secret with that name in the BeyondTrust Password Safe
- There is a secret with that name, but it does not contain a username and password that is authorized for authentication with Active Directory
You can now log in to the Control Room as admin and
add users and roles.
Note: The passwords within the BeyondTrust Password Safe are masked
so ensure that you copy and save them after you create them.