Adding Active Directory Federation Services (AD FS) as an Authentication Connector (OpenID Connect)
Add AD FS as an OpenID Connect authentication connector in Privilege Secure, including the AD FS setup, CORS, and claim rules.
Adding Active Directory Federation Services (AD FS) as an Authentication Connector (SAML)
Add Active Directory Federation Services (AD FS) as a SAML authentication connector by configuring AD FS first, then adding the connector in Privilege Secure.
Adding Microsoft Entra ID as an Authentication Connector (OpenID Connect)
Add Microsoft Entra ID as an OpenID Connect (OIDC) Authentication Connector by registering an app in Entra ID and configuring Privilege Secure.
Adding Microsoft Entra ID as an Authentication Connector (SAML)
Add Microsoft Entra ID as a SAML Authentication Connector by configuring the Enterprise Application and completing the Configuration Wizard.
Configuring a Custom RADIUS Authentication Connector
Configure a custom RADIUS Authentication Connector, enable external RADIUS authentication in appsettings.json, and assign the connector to users and groups.
Disabling MFA for Users or Groups
Disable Multi-factor Authentication (MFA) for individual users or groups in Privilege Secure. Disabling MFA is not recommended per security best practices.
Configuring a Duo RADIUS Proxy for Multi-Factor Authentication
Configure a Duo RADIUS proxy server as an MFA provider for Privilege Secure by editing authproxy.cfg and verifying the authentication settings.
Invalid Multi-Factor Authentication Code Error
Fix the "Invalid MFA code" login error by syncing the system time between the Privilege Secure server and clients.