Sign-in options for the NetBackup web UI
NetBackup supports authentication of local domain users and Active Directory (AD) or LDAP domain users. AD and LDAP domains, smart card, and single sign-on (SSO with SAML) requires separate configuration for each primary server domain where you want to use the authentication method.
NetBackup supports the following types of user authentication:
Username and password
Digital certificate or smart card, including CAC and PIV
This authentication method only supports one AD or LDAP domain for each primary server domain and is not available for local domain users.
See Configure user authentication with smart cards or digital certificates.
Single sign-on, with SAML
Note the following requirements and limitations.
To use SSO, you must have a SAML 2.0 compliant identity provider configured in your environment.
Only one AD or LDAP domain is supported for each primary server domain. This feature is not available for local domain users.
Configuration of the IDP requires the NetBackup APIs or the NetBackup command nbidpcmd.
API keys are used to authenticate a user or a group and cannot be used with SAML-authenticated users or groups.
Global logout is not supported.