Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Web UI Administrator's Guide
  3. Section II. Managing security
  4. Configuring authentication options
  5. About Single Sign-On (SSO) configuration
NetBackup™ Web UI Administrator's Guide

About Single Sign-On (SSO) configuration

You can configure Single Sign-On (SSO) with any identity provider (IDP) that uses the SAML 2.0 protocol for exchanging authentication and authorization information. Note that you can configure an IDP with more than one Veritas product. For example, the same IDP can be configured with NetBackup and with APTARE.

Note the following requirements and limitations:

  • To use SSO, you must have a SAML 2.0 compliant identity provider configured in your environment.

  • Only identity providers that use AD or LDAP directory services are supported.

  • Configuration of the IDP requires the NetBackup APIs or the NetBackup command nbidpcmd.

  • SAML users cannot use the APIs. API keys are used to authenticate a user and therefore cannot be used with a SAML-authenticated user.

  • Global logout is not supported.

Figure: Example NAT configuration: Identity provider in a private network

Example NAT configuration: Identity provider in a private network

 

Figure: Example NAT configuration: Master server in a private network

Example NAT configuration: Master server in a private network

 

Figure: Example configuration: Master server and identity provider in same network

Example configuration: Master server and identity provider in same network

 

Figure: Example configuration: Master server in private network and identity provider in public network

Example configuration: Master server in private network and identity provider in public network

Feedback

Was this page helpful?
Previous

Disable or temporarily disable smart card authentication

Next

Configure NetBackup for Single Sign-On (SSO)

Feedback

Was this page helpful?