Adding a Rule

You must add a rule using Command Control or permission using Access Control for every application to which Privileged Account Manager must perform SSO.

To add an application SSO rule:

  1. Click Command Control > Rules.

  2. Click Add in the last pane.

  3. Specify a name for the rule and click Add.

  4. To configure the rule, select the rule and click the edit icon in the last pane.

  5. Make the following changes:

    Session Capture: Set this option to ON to enable session capture.

    Video Capture: Set this option to ON to enable video capture.

    Authorize: Select Yes and select Stop if authorized.

    Define what happens next by using the drop-down list as follows:

    • Blank: The next rule in the hierarchy is checked.

    • Stop: No more rules are checked for the command.

    • Return: The next rule to be checked is up one level in the hierarchy from the current rule.

    • Stop if authorized: If Authorize is set to Yes, no more rules are checked for the command.

    • Stop if unauthorized: If Authorize is set to No, no more rules are checked for the command.

    Application SSO: Select Yes.

    If you are creating nested rules, ensure that you set the Application SSO to Yes in each and every rule in the nested hierarchy.

    Application Details: Select the appropriate application SSO vault.

    Application Credentials: Select the appropriate credentials to perform SSO.

    Application Host: Specify the host and the port number that must be included during SSO. You must specify the host and port number in the format <Host Name or IP Address>:<Port Number>

    This option appears only when you have selected Use Host from Policy when creating the application SSO credential vault.

    Account Domain: Select the domain which you used when configuring the application SSO installation attributes.

    Credentials: Select the domain credential created for SSO.

    Run Host: Select All Host as Privileged Account Manager would perform load balancing when connecting to RemoteApp servers.

    For more information about all the rule configuration fields, see Modifying a Rule.

  6. Click Modify.

  7. Click the command icon on the middle pane.

  8. Drag the Application SSO command and drop it on the application SSO rule.

    If you are creating nested rules, ensure that you drag the Application SSO command and drop it on the parent application SSO rule.

This rule is accessible by all the Privileged Account Manager users. If you want to restrict the application access to specific users, create a user group and drag and drop the user group to this rule. For more information about creating user groups, see User Groups.