Users Guide

3. Associate the device object and privilege object using the association object.

4. Add the preceding SSO user (login user) to the device object.

5. Provide access privilege to Authenticated Users for accessing the created association object.

Related concepts

Adding iDRAC users and privileges to Active Directory on page 142

Configuring iDRAC SSO login for Active Directory

users

Before configuring iDRAC for Active Directory SSO login, make sure that you have completed all the prerequisites.

You can configure iDRAC for Active Directory SSO when you setup an user account based on Active Directory.

Related concepts

Prerequisites for Active Directory Single Sign-On or smart card login on page 148

Related tasks

Configuring Active Directory with Standard schema using iDRAC web interface on page 134

Configuring Active Directory with Standard schema using RACADM on page 134

Configuring Active Directory with Extended schema using iDRAC web interface on page 144

Configuring Active Directory with Extended schema using RACADM on page 144

Configuring iDRAC SSO login for Active Directory users using web

interface

To configure iDRAC for Active Directory SSO login:

NOTE: For information about the options, see the iDRAC Online Help.

1. Verify whether the iDRAC DNS name matches the iDRAC Fully Qualified Domain Name. To do this, in iDRAC Web interface,

go to Overview > iDRAC Settings > Network > Network and see the DNS Domain Name property.

2. While configuring Active Directory to setup a user account based on standard schema or extended schema, perform the

following two additional steps to configure SSO:

● Upload the keytab file on the Active Directory Configuration and Management Step 1 of 4 page.

● Select Enable Single Sign-On option on the Active Directory Configuration and Management Step 2 of 4 page.

Configuring iDRAC SSO login for Active Directory users using

RACADM

To enable SSO, complete the steps to configure Active Directory, and run the following command: