How to enable SSO in ADManager Plus
ADManager Plus offers a built-in option to configure Active-Directory-based SSO to access or log in to it. This SSO option supports both NTLMv2- and SAML-based authentication.
Steps to configure SSO to log in to ADManager Plus
- Click the Delegation tab.
- Go to Configuration and select Logon Settings.
- On the Logon Settings page, click the Single Sign-On tab.
- Select the Enable Single Sign-On with Active Directory option.
- Based on your needs, select NTMLv2 or SAML authentication.
- NTML Authentication
ADManager Plus uses Jespa for NTMLv2 SSO authentication. In builds 7162 and above, the Jespa JAR file has to be downloaded and added to ADManager Plus' lib folder before enabling NTMLv2 SSO. Click here to learn more.
- Select the NTLMv2 Authentication option.
- Select the domains that you wish to enable single-sign on for from the Select Domainsdrop-down box.
- Click Save Settings.
- SAML Authentication
- Configure ADManager Plus in the identity provider (IdP) of your choice using the steps mentioned here, and download the Metadata file from the IdP.
Note: Okta, OneLogin, Pingidentity, ADFS, or any SAML-based IdP or custom IdP can be used.
- To configure the IdP in ADManager Plus, select the relevant IdP from the Identity Provider drop-down list.
- In SAML Config Mode, select the Upload Metadata File option.
- Browse and upload the metadata file downloaded while configuring ADManager Plus in your IdP application.
- Select the Force SAML Login option located at the bottom of this page if you wish to force users to log in to ADManager Plus only through SSO.
- Click Save.
- Configure ADManager Plus in the identity provider (IdP) of your choice using the steps mentioned here, and download the Metadata file from the IdP.
- NTML Authentication
New to ADSelfService Plus?
Related Articles
How do I configure Okta SSO using ADManager Plus?
Objective This article explains how to integrate Okta with ADManager Plus using SAML 2.0 to enable secure SSO. This integration allows users to log in to ADManager Plus using their Okta credentials, streamline access, improve authentication security, ...Logon Restriction error in ADManager Plus
Issue description When newly created technicians attempt to log in to ADManager Plus, they encounter the following error message: As logon restrictions are enforced, you can login using only the built-in accounts. Please contact your administrator ...Best practices to enhance the protection of ADManager Plus
This article lists some of the best practices that you can use to secure ADManager Plus. You can implement these recommendations, regardless of whether you choose to deploy the product on-premises or on the cloud. Modify the permissions of ADManager ...SSO setup in ADManager Plus fails with errors after authentication
Issue description After configuring single sign-on (SSO) for ADManager Plus using an identity provider (IdP), such as Okta, Active Directory Federation Services (AD FS), Entra ID, or any SAML-compliant provider, users may encounter errors like: An ...Duplicate SSO login attribute causing SAML error in ADManager Plus
Issue description When attempting to log in to ADManager Plus using SAML authentication, users may encounter the following error: Login failed. The SSO login attribute value "user@example.com" is not unique within the domains configured in ADManager ...