Administrator Guide

NOTE: If you log in to Windows using your Active Directory credentials, you will be logged in to the PS Series group
automatically without re-authenticating.
Change the Active Directory Group Name
Before you change the name of a PS Series group that has already been congured for single sign-on, Dell recommends that you
leave the current Active Directory (AD) domain, change the group name, and then join the AD domain again using the new name.
NOTE: When using single sign-on, the group name cannot contain more than 19 characters.
About Single Sign-On
Single sign-on enables users who have already logged in to their PCs using Windows Active Directory credentials to automatically log
in to the Group Manager GUI without having to specify the Windows Active Directory login credentials again. To use single sign-on,
congure the PS Series group to direct it to the same Active Directory domain that authenticates users when they log in to their
workstations.
NOTE:
• To use this option, you must specify an Active Directory server on the network.
• When using single sign-on, the group name cannot contain more than 19 characters.
Check Server and Single Sign-On Conguration
After you have successfully congured and tested the Active Directory server and single sign-on, you can check the status of these
features in the Group Manager GUI.
To check the Active Directory server and single sign-on connections:
1. Click Group → Group Conguration.
2. Click the Administration tab.
3. In the Authentication panel, both AD Server and Single Sign-On should display the status as Configured when they have
been set up correctly. To verify that each feature is connected, click Check.
• The AD Server Check button queries the congured IP address and port and returns the results in a dialog box.
• The Single Sign-On Check button connects with Active Directory and veries that the PS Series group has joined the
Active Directory domain that you congured.
Use Single Sign-On to Log In to a PS Series Group
Before you can use single sign-on (SSO) and Windows Active Directory (AD) to log in to the PS Series group with your Windows AD
credentials, make sure that the group has been congured for single sign-on.
NOTE: To use single sign-on, Active Directory User’s UPN (User Principle Name) and SAM Account Name must be the
same.
1. Congure the PS Series group for single sign-on and join it to an Active Directory domain (for example, the Engineering
domain).
NOTE: For single sign-on, congure the PS Series group to direct it to the same Active Directory domain that
authenticates users when they log in to their workstations.
2. Log in to a client computer that has already joined the AD domain (for example, Engineering), using your user credentials from
Active Directory.
3. Start the Group Manager GUI. If you are logging in for the rst time using AD and you have administrator permissions, the Use
Windows Credentials option appears in the Log In to Group dialog box.
NOTE: If Use Windows Credentials does not appear in the dialog box, make sure that the PS Series group has been
congured for single sign-on, and that the group is in the same AD domain as the client computer that you are using
to log in.
About Group-Level Security
77